520095de8dc81c07367ccbfe4621a015_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

520095de8dc81c07367ccbfe4621a015_JaffaCakes118
Size

328KB
MD5

520095de8dc81c07367ccbfe4621a015
SHA1

04575eb592904a42d2cae5bf87cad8422999a6fb
SHA256

02d6bf9952bae7a69efe5e7d6bece907a783efcb63a9ad000b87d021245dbc11
SHA512

e7c1a76dfac6000d9c5e13cedfca58b970a909dde7e391592f0eadb1a9dc9ba3e5e4d45eb71a5aac8df8ae6cf149da8e16d81cddad31ad5cb454ae50e6552850
SSDEEP

6144:dnQSZYY7IYFt1eLNJjBCWal2KMtK+kdZ8Ab/cb9xJOOuBV3ulBWV:NQS50YrmJNCWKiIKvlcOBa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
520095de8dc81c07367ccbfe4621a015_JaffaCakes118

Files

520095de8dc81c07367ccbfe4621a015_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f1b7f3d119c2987a226fcdd14cc125e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetLastError
ExitProcess
GetCurrentThreadId
GetCommandLineA
GetSystemTimeAsFileTime
GetVersion
LoadLibraryA
GetTickCount
GetModuleFileNameA
VirtualQueryEx
lstrcmpiW

msvcrt

fclose
_itoa
_isctype
_onexit
free
strcpy
strcat
tolower
strrchr
iswctype
fgets
__mb_cur_max
_beginthreadex
_except_handler3
strtoul
_wcsnicmp
malloc
_adjust_fdiv
_strtime
memmove
fseek
wcsncmp
_stricmp
_splitpath
_snwprintf
bsearch
_initterm
_pctype
__p__fmode
__setusermatherr
strchr
_beginthread
_fullpath

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ