11366518c5bbdaf13bbba523be407554_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11366518c5bbdaf13bbba523be407554_JaffaCakes118
Size

192KB
MD5

11366518c5bbdaf13bbba523be407554
SHA1

802e56b04a45929cfc6ca74583bb4fa49c8e9dd0
SHA256

846caa6a1fecd0d2e3947b773f4f56427a99f069cb52ac068b34e3222437a39d
SHA512

33913097738c896286e8502a3d48d3384687f83b165f732e3cdf5f8df4ce06ad6f84512dc76b522bb4be464e2e98808e0bcfc1ff79a698c6ea47f610e96024b7
SSDEEP

3072:2sXN2tFCdbLkh3dQIjuTQSCx1gGjMQaXQWwjplEdzgV987yV2Gr0M15:LAtFCd3kh3hSMSwCGjMlXmABMuOdf5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11366518c5bbdaf13bbba523be407554_JaffaCakes118

Files

11366518c5bbdaf13bbba523be407554_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3beb497c9bd5c9c5291c4588a95a0491

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryW
SetEnvironmentVariableA
GetProcAddress
GetFullPathNameA
VirtualProtectEx
InterlockedIncrement
GetModuleHandleW
GetEnvironmentVariableA
FormatMessageA
CopyFileA
GetProcessHeap
CreateFileMappingA
GetCurrentDirectoryA
GetOEMCP
SetThreadLocale
GetTempFileNameA
GetThreadLocale
VirtualFree
GetModuleFileNameW
GetStartupInfoW
DeviceIoControl

msvcrt

__p___initenv
__getmainargs
_controlfp
_XcptFilter
__setusermatherr
free
_exit
__p__commode
calloc
_adjust_fdiv
__set_app_type
__p__fmode
_except_handler3
_initterm

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ