039db7d9c8e461a38181f2b1028b9bb0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

039db7d9c8e461a38181f2b1028b9bb0_JaffaCakes118
Size

72KB
MD5

039db7d9c8e461a38181f2b1028b9bb0
SHA1

fa5ec2881ed30710c99558ef264f36c93657d2a1
SHA256

7767eb507a0993849fc06dccb7ab97f48924cbcbf194bb190c4ec659fadf2c17
SHA512

baaef1370a340c3e0f74c2ba0f69ce8e710a517689a3d1d2444453ab03a26087ab0b341a505ef455352db81dff30148ea847118e9dfcde3d318b5752754496db
SSDEEP

1536:IRiLELXkKrgssR6+Toekx9O2Yy70WfN0SjQrto+PLHNi2Od:IRi4LXtKTobx9NoWQ5dZm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
039db7d9c8e461a38181f2b1028b9bb0_JaffaCakes118

Files

039db7d9c8e461a38181f2b1028b9bb0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1e4962130dbe2886fa4e22b39e82054f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
VirtualUnlock
VirtualLock
GetCommandLineW
GetSystemInfo
ReleaseMutex
CreateMutexW
ResetEvent
SetEvent
CreateEventW

msvcrt

_XcptFilter
_cexit
_initterm
__wgetmainargs
memset
tanh
_wtoi64
iswdigit
_controlfp
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
exit
_exit
_wcmdln
_initterm
memcpy

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ