edfa2b37481796a62d71a8b9e5c13615_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

edfa2b37481796a62d71a8b9e5c13615_JaffaCakes118
Size

82KB
MD5

edfa2b37481796a62d71a8b9e5c13615
SHA1

2417504b117d336d6906254366da747830132c23
SHA256

f4db0dc2e96a62967b8940c324b1d0e3d9054e57cd78f844440085eab58b1e83
SHA512

97b0157a9b9e953a91f28fffd3fa282ccad0733243c3c83193a361157c16058d63d12b0f6b0c349db6212536052cf86bbacea1d9afc1cfd1867365b92645c747
SSDEEP

1536:V7hlnKv10UkrMqhNMLJCNAc0P7buc2kFWbsQdMmFUTTlfZWpHF:V/KvtkrMWKarUGkFksxiUT5f8pHF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
edfa2b37481796a62d71a8b9e5c13615_JaffaCakes118

Files

edfa2b37481796a62d71a8b9e5c13615_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1d452857325149a1822e7e8f743c4609

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyn
SetEnvironmentVariableA
SetUnhandledExceptionFilter
lstrcmpiW
GetNumberFormatW
GetProcessHeap
HeapReAlloc
lstrcpynA
HeapUnlock
CreateSemaphoreW
HeapUnlock
WaitForSingleObject
GetModuleHandleW
lstrcmpW
HeapSize
VirtualFree
HeapAlloc
LocalCompact
SetUnhandledExceptionFilter
CompareStringW
SignalObjectAndWait
GetProcessHeap
FormatMessageW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 579B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 74B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ