18390577a54d919dca2280071db237db_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18390577a54d919dca2280071db237db_JaffaCakes118
Size

28KB
MD5

18390577a54d919dca2280071db237db
SHA1

7372525e61f4dffe2357fa8c8e53b048665e6dab
SHA256

a537aa1d85c809a29c001d263d3dd581086c6fe0bd06ef83500328ad177e2b38
SHA512

c45f21bb729089a152a281965f5575af50ea52bf6e2ccb5298fcc0a57f00a4ee29553c5fc932b7f74a433f1f3e30b4fe459514814856e688abce03decd73f994
SSDEEP

384:3OCkD/ei1gdtvUr3QGlhKsz4LUVJVewg92nl0:+14sLQGlhH8LEJjg92nK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18390577a54d919dca2280071db237db_JaffaCakes118

Files

18390577a54d919dca2280071db237db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

12848c5861f8990a32b40182d3223968

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrencyFormatA
QueryPerformanceCounter
GetEnvironmentVariableA
HeapAlloc
SetMailslotInfo
GetModuleHandleA
GetStartupInfoA

user32

GetQueueStatus
LoadBitmapA

ole32

CoInitialize

msvcrt

_adjust_fdiv
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_acmdln
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE