d6c5005e072e024b63737044142b7738_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6c5005e072e024b63737044142b7738_JaffaCakes118
Size

253KB
MD5

d6c5005e072e024b63737044142b7738
SHA1

923b9da3e922088da0239ed875b719f0aeed4bfb
SHA256

b778876e79138d3d3e2c3d4ce80a0c2f40dc3b4cd20b0a8df51592cf6881ca9c
SHA512

d689aed7f1f480723f8b88b3169185bb821798e3f1666d325ca1c74aa7a6b6094b3c98a77bfc185103b2deb0c11718a12a2e235c9769cb057c3ee07eb4fa77cd
SSDEEP

3072:fz55l8rBsWyuajAvDiZEkTyZP+hPBDm5OthP6dERz8AGDkkhxnW7d4oJd:mls7nTOu0+hi2hyyYAGb7W7R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6c5005e072e024b63737044142b7738_JaffaCakes118

Files

d6c5005e072e024b63737044142b7738_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5864dfb16c74194c7682167075f7bfde

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetCommandLineA
GetVersion
InterlockedDecrement
DisableThreadLibraryCalls
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetModuleHandleA
GetStartupInfoA

ole32

CreateStreamOnHGlobal

msvcrt

localtime
time
_except_handler3
_adjust_fdiv
free
malloc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
__p__commode
__p__fmode
__set_app_type
_controlfp
rand

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 228KB - Virtual size: 455KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ