d6ae50810157282c65c7ca865c4b7b78_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6ae50810157282c65c7ca865c4b7b78_JaffaCakes118
Size

206KB
MD5

d6ae50810157282c65c7ca865c4b7b78
SHA1

f02623f3b334a3c6e14b16908596ed3df86aa18c
SHA256

657f9eabb87ffc9f26f233853d4c687e5f33edf010e44202ca2a49e67635646d
SHA512

45ade8d3d5fbf16de3e11748973a632c7486c824e3d248eca8439f493f98812ba4415968080e076979a68d6cf510aaf6ae24d7beb377d840e0a0a6de124d2f88
SSDEEP

3072:3I5yMGFTEqe2y8ZKO/4VPat8bbMsDmGyzdoWq/9kjEd0S7WZIYHn64I9:A2e9+KOcPat8ZDmGyzdwqjeWBa9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6ae50810157282c65c7ca865c4b7b78_JaffaCakes118

Files

d6ae50810157282c65c7ca865c4b7b78_JaffaCakes118
.exe windows:1 windows x86 arch:x86

89af058f099fde360eac6446c7317e48

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_ismbbkprint
_controlfp
_wcslwr
__p__fmode
_tempnam
__set_app_type
vfprintf
__p__commode
_wfindfirsti64
_acmdln
_initterm
memcpy
_sopen
_adjust_fdiv
exit
_exit
_except_handler3
__setusermatherr
__getmainargs
_XcptFilter
_findfirst

kernel32

WriteConsoleW
GetLocaleInfoA
OpenEventA
CreateFileA
LoadLibraryA
GetModuleHandleA
InterlockedDecrement
InitializeCriticalSection
GetStartupInfoA

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 193KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ