17623d3f363706c0586f82e5cfe59ba0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17623d3f363706c0586f82e5cfe59ba0_JaffaCakes118
Size

151KB
MD5

17623d3f363706c0586f82e5cfe59ba0
SHA1

8b61586ec63da24ab4ce0f84672be8c7ca5f5036
SHA256

c0183d0bda40228e69ea64dab9b05074362580e17162fdb7efd2ca3835dcb1af
SHA512

d83bf38d4c522f457a45df6ab5eff8225c66fa772daf36d2941f176010ffededfe8c2c116cea3f793399b6230bd342087fbc9adc037e6a7c227eff9c50c97f90
SSDEEP

3072:iHpV/hLphcjgtnLDQDXXg05xh8LH/KLoAKAyOW:izhLjtb05/MeLW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17623d3f363706c0586f82e5cfe59ba0_JaffaCakes118

Files

17623d3f363706c0586f82e5cfe59ba0_JaffaCakes118
.exe windows:1 windows x86 arch:x86

048c53c81cae92d945622fc047ee66f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetStdHandle
SetHandleCount
GetStartupInfoA
HeapAlloc
SetUnhandledExceptionFilter
MapViewOfFile
TerminateProcess
SetProcessWorkingSetSize
GetCurrentProcess
GetCommandLineW
GetComputerNameW
HeapCreate
SetFilePointer
lstrcmpA
GetModuleHandleA
GetLocaleInfoA

msvcrt

__getmainargs
_mbsnbcoll
_adjust_fdiv
exit
_initterm
fputs
_XcptFilter
_except_handler3
__set_app_type
_exit
_adj_fpatan
_acmdln
__setusermatherr
isprint
_controlfp
fscanf
_c_exit
wcscoll
__p__fmode
_umask
_wspawnvp
__p__commode
_fileinfo
memcpy

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ