558b1fb01989530c6998b650398ef037_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

558b1fb01989530c6998b650398ef037_JaffaCakes118
Size

124KB
MD5

558b1fb01989530c6998b650398ef037
SHA1

6a59bfc3a318d66ecf8608ad2c1678d1192b2e44
SHA256

8e8ed789898515a815d80098664f973a5695e0a7dc56ccfead485187eb4bca3e
SHA512

81668333b82a90a5597037a342258e448303a059993fd6f2fe699cfcd6df652d6fede4257b4b3514a71bf108012f82af993d503c9d191498f974050007a6daa0
SSDEEP

1536:3Ux+Jf6Yn9lYbQyLlq34N7GN3sI5DpV4uWPardiUbNM5BbbQnybRosmAcJOeL1lT:ZHcbc34N7C7VjzqngyFo6yvLf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
558b1fb01989530c6998b650398ef037_JaffaCakes118

Files

558b1fb01989530c6998b650398ef037_JaffaCakes118
.exe windows:5 windows x86 arch:x86

dda20c46b760af7738f92dec56d45102

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
SetFileAttributesA
GetConsoleMode
GetThreadLocale
CompareStringA
GetTickCount
FreeEnvironmentStringsA
GetModuleHandleW
GetCurrentProcessId
SetFilePointer
VirtualProtect
GetDriveTypeA
DeviceIoControl
GetLocaleInfoA

msvcrt

_adjust_fdiv
calloc
atan2
_except_handler3
__getmainargs
__p___initenv
__p__fmode
free
__p__commode
_exit
_initterm
_XcptFilter
__set_app_type
_controlfp

Sections

.text
Size: 1024B - Virtual size: 562B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 826B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 103KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE