da79652a7e1379b00f3859b5dc1ddb8d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da79652a7e1379b00f3859b5dc1ddb8d_JaffaCakes118
Size

131KB
MD5

da79652a7e1379b00f3859b5dc1ddb8d
SHA1

2ab0b49e2fc862f511660813e3238c1293894d0b
SHA256

9d5577a643180e85eda997334fcae81a47a6b3b7f0661dbe205629b238f407ac
SHA512

633ee0c111351be4d670087c5a5abd8007f5baa40a5b88e1c4e969be195738d1d04327975b4a30ce27e27c52892abe6e6551d99ecc901cc628451cd6a66f4433
SSDEEP

1536:20ehMom5P1wuSnE7Z8RlOvmkLcBeQFsX0Uvnfl+joGJXSuwlYjh4MBXrE:20YMHSnE7Clur7Q20EEoSXSuh4MBbE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da79652a7e1379b00f3859b5dc1ddb8d_JaffaCakes118

Files

da79652a7e1379b00f3859b5dc1ddb8d_JaffaCakes118
.exe windows:1 windows x86 arch:x86

b800f13b5970b9fed83c023def01b733

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adj_fprem1
_ui64tow
_XcptFilter
_wfopen
_wspawnlpe
_fputwchar
__setusermatherr
_execle
memcpy
wcstod
_adjust_fdiv
_exit
exit
__getmainargs
_ismbcalpha
__p__fmode
_control87
_except_handler3
_acmdln
_controlfp
__p__commode
labs
_initterm
__set_app_type
_aligned_realloc
fgetc

kernel32

HeapFree
MultiByteToWideChar
SetFilePointer
LCMapStringW
lstrcpynA
DeviceIoControl
GlobalAlloc
SetEvent
GetLastError
GetACP
HeapCreate
HeapAlloc
GetModuleHandleA
LoadResource
GetStartupInfoA

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ