567f23a877f9e20d5eb86b64a566ebda_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

567f23a877f9e20d5eb86b64a566ebda_JaffaCakes118
Size

47KB
MD5

567f23a877f9e20d5eb86b64a566ebda
SHA1

eaa28de66971927008972793cfa73fd89b9c2d6a
SHA256

a72d453fe77f912867b5b1b9102e75f40cf475db8ca3e2df3fcacbe524d94351
SHA512

ab26643c94f1368d5f8ef8c8023598410da2e1ea4ab48c72f66b118b1d1df443df5e024e613127e6b339f67a1395d789267aa04fa063977cbb9d1fc61d6db05e
SSDEEP

768:T0P6sdHXQCtzAn6C73HWVcHQZ8dSXoKLXG31KGjsLPs:T0iAXQCI7WG/KrjGm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
567f23a877f9e20d5eb86b64a566ebda_JaffaCakes118

Files

567f23a877f9e20d5eb86b64a566ebda_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ea9cfb33d288d3d167ab1eff37f2b60d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
HeapSetInformation
FindClose
FindFirstFileW
lstrcmpW
FoldStringW
GetCurrentProcessId
GetCommandLineW
MulDiv
GetFullPathNameW
LocalSize
GetLastError
WriteFile
SetLastError
WideCharToMultiByte
SetEndOfFile
LocalReAlloc
GetFileInformationByHandle
HeapAlloc
HeapFree
GetTimeFormatW
GetEnvironmentVariableA
CloseHandle
CreateFileA
lstrcatA
GetWindowsDirectoryA
GetModuleHandleA
GetStartupInfoA

Sections

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ