dc911ffa70db74ee9528910258382025_JaffaCakes118 | Triage

Sharing

General

Target

dc911ffa70db74ee9528910258382025_JaffaCakes118
Size

196KB
MD5

dc911ffa70db74ee9528910258382025
SHA1

d3e375b92bd21caf4af4eee4510de3e036a1fdcd
SHA256

7d969a0459165cee208168d3c8701d0c5de323dda87dafe0380b4c3a343199f5
SHA512

f74d75459d9914e94eca3f2da8b926ce601be15950010bbf4a5f54a161bde47ae562321539c081229b57bc1ae9f8370795f044a2bf17a5ce14e3c939f0377d2f
SSDEEP

3072:gO/XKm7D2qvr+gZfT2dxZZJvx4JH3g8DzZnclDzEwIe0BKDi1cKJL:z/XpD2qvCmK7ZJvx4JH3ZDzZ8IwVzOG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc911ffa70db74ee9528910258382025_JaffaCakes118

Files

dc911ffa70db74ee9528910258382025_JaffaCakes118
.exe windows:1 windows x86 arch:x86

268688126c7a8c060a79c8e1b5208d22

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
_adjust_fdiv
_exit
memcpy
_strdate
_XcptFilter
_acmdln
_wtoi
__getmainargs
_wmkdir
__p__commode
_wspawnv
_execvpe
_except_handler3
__set_app_type
_getpid
exit
_wutime64
_chkesp
_findnext
_controlfp
_wperror
_initterm
__p__fmode
_ismbcprint
_purecall

kernel32

GlobalUnlock
CreateEventA
WideCharToMultiByte
MapViewOfFile
GetCurrentDirectoryA
LCMapStringA
FreeEnvironmentStringsA
TlsSetValue
HeapCreate
HeapAlloc
CreateEventW
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
FileTimeToLocalFileTime
GetModuleHandleW
LCMapStringW
GetProcessWorkingSetSize
WriteConsoleA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 182KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ