dc6bcc79a613daec0081824e5abb5d6e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc6bcc79a613daec0081824e5abb5d6e_JaffaCakes118
Size

108KB
MD5

dc6bcc79a613daec0081824e5abb5d6e
SHA1

bb849d998d02aebc510559049ed2166dab9a4c89
SHA256

c6e3f5df03cc0f6056d0c196bd49365b4c8c703a959d9795de3fa3020f12e66a
SHA512

b75d7210b47e103f02ef494f28dd6fd21b159838fca114d15613117502cff0551af331eaf556cc80f42ae75eea9ac49d112af8eee8dfda54cb15925ee0ca9ff7
SSDEEP

1536:Zbl6a34NGAcoMcPp2l1Ij5GoCzuH9AcM/vrlMCDUrmVy380RiTNZLGkIt:ZxSNGAcl4FUCH9RYvR1M3PsTaTt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc6bcc79a613daec0081824e5abb5d6e_JaffaCakes118

Files

dc6bcc79a613daec0081824e5abb5d6e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0053b2b851447031ad7aab8f5256af62

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

outllib

RenInitInstance@12
FMessageLoop@12
RenExitInstance@0

kernel32

WideCharToMultiByte
GetEnvironmentStringsW
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
VirtualAlloc
GetProcAddress
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapFree
HeapAlloc

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE