166c92589f2504cec9e97c358a3f7f60_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

166c92589f2504cec9e97c358a3f7f60_JaffaCakes118
Size

32KB
MD5

166c92589f2504cec9e97c358a3f7f60
SHA1

a06213edc72e06a4f65befafa6a3e33366a6c00c
SHA256

3726797fdcad1f5db96d36a06ce0a99978eabcc7d72627613f995911755dc4ef
SHA512

a45def569a2bd6016e577acbadf3d301a1d4cbebaae93cca7ceb356ca0402f3620ef3b53141ae2ad26e57154453f4c540f36ce09711d4841cd9c0aab9b8997d5
SSDEEP

768:AmaHjCAwFUuvezTwpbLyDJpRZEbFATDHWUrl3F07mh:EDMFU2ezTw1QJpzEBSD2Oz07O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
166c92589f2504cec9e97c358a3f7f60_JaffaCakes118

Files

166c92589f2504cec9e97c358a3f7f60_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b7cad0e3fed8afdf4c3da078b5e1ddbb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_wcslwr
_itoa
strncat
strcat
_initterm
_splitpath
atol
_strlwr
_snprintf
__getmainargs
_access
_snwprintf
bsearch
tolower
_strtime
wcscpy
_ltoa
strncmp
sprintf
strchr
_except_handler3
strcspn

kernel32

GetCurrentThreadId
LoadLibraryA
GetSystemTimeAsFileTime
ExitProcess
GetLastError
GetTickCount
GetCommandLineA
GetModuleHandleA
GetModuleFileNameA
GetVersion
VirtualLock
GetShortPathNameW
MoveFileExA

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ