573d515bfcfcad33ddc61d24ae0c519e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

573d515bfcfcad33ddc61d24ae0c519e_JaffaCakes118
Size

49KB
MD5

573d515bfcfcad33ddc61d24ae0c519e
SHA1

a2d8cd0f80726d104a3b8ff5ba7ffbdae2954a6c
SHA256

0e2bbd0b403f6989c32bbad55d47158bec9e463ce359c7f6de6fcecae460ee9b
SHA512

016e0d0730734ed1771e89b40e0273d01f5cccd248b20ea2af337582bf9ec40dba80f1dd13d70d4c5d5ca0fc5bb8f097db6540d882382c11330614f64317937c
SSDEEP

768:nxRkbVuim/n20zsuA/zXe3NL9IafnikWBjYy7861vbQUA3MQ1ROAJ:n7gkzsBziNG2ikWBjhLvbQ/nTrJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
573d515bfcfcad33ddc61d24ae0c519e_JaffaCakes118

Files

573d515bfcfcad33ddc61d24ae0c519e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b4897b3d72e7ec664e230d78e68fd0ed

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateProcessA
ExitProcess
FatalAppExitA
FileTimeToSystemTime
FindResourceA
GetACP
GetCommandLineA
GetCommandLineW
GetConsoleOutputCP
GetModuleHandleA
GetOEMCP
GetPriorityClass
GetProcessWorkingSetSize
GetStartupInfoA
GetUserDefaultLCID
HeapAlloc
HeapCreate
HeapReAlloc
IsValidLocale
MulDiv
MultiByteToWideChar
OpenEventA
OutputDebugStringA
RaiseException
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetLastError
SetUnhandledExceptionFilter
TerminateThread
TlsSetValue
lstrcpynA

user32

TrackPopupMenu
ShowWindow
KillTimer
GetClassNameA
DefWindowProcA

comdlg32

PrintDlgExA
GetOpenFileNameA

Exports

Exports

NxScaleCookedConvexMesh

Sections

.text
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ