d5b0cad6890607bbc61545c0c1908f37_JaffaCakes118 | Triage

Sharing

General

Target

d5b0cad6890607bbc61545c0c1908f37_JaffaCakes118
Size

201KB
MD5

d5b0cad6890607bbc61545c0c1908f37
SHA1

acfd0db864061f263d4fc02e46d1ec6e99375e72
SHA256

75aadf317f37b54091c816fbf2823a643004701e2c4d6806e3ab137cf7c8d6b4
SHA512

4b82a61f6d4ad75f993077ac2947a897a57f2ddcfd9050e18854d1820fe5fab48b59968a1edd4f008fdab87c0d103180fc3f3e232b0353c784ef28e5dd2e5765
SSDEEP

3072:lbgPeC8gUYiRnyA/RAmb2AEZwXK1gMEh80PWF3muUnhbAZESmXMLKQ56Ffvt282r:lyriRn5ZANb16hWmuUhMNGQcfv12f3p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5b0cad6890607bbc61545c0c1908f37_JaffaCakes118

Files

d5b0cad6890607bbc61545c0c1908f37_JaffaCakes118
.exe windows:4 windows x86 arch:x86

787c31908a77d63dfd41b3f8395fa772

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
EnumDateFormatsW
GetModuleHandleA

msvcrt

_resetstkoflw
iswupper
_aexit_rtn
_telli64
_wspawnl
_mbsnbcat
_waccess
_wchmod
__setusermatherr
_aligned_free
exit
_initterm
_fmode
_spawnv
_wmkdir
_pclose
wcschr
_popen
_chsize
_atoldbl
_mbscspn
_except_handler3
_XcptFilter
_adjust_fdiv
_acmdln
time
_findfirst
_sys_errlist
__getmainargs
_wcsnset
realloc
_environ
_ismbcl1
_safe_fprem
_exit
_adj_fprem
putwchar
_winminor
__p__commode
memcpy
_chgsign
_controlfp
_iob
_filelength
__set_app_type
__p__fmode
_seterrormode

Sections

.text
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ