f6dd3d00bad105658758db8c03fb14da_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6dd3d00bad105658758db8c03fb14da_JaffaCakes118
Size

40KB
MD5

f6dd3d00bad105658758db8c03fb14da
SHA1

28cab9b95c6ef51e0cc32e300b389a197de9b025
SHA256

663457177a3304512387d7dccaab469e57b007367061148e7a61a2a27b3e1192
SHA512

dee1c4edf56c0cea704a30563732c48177e5bfdc4fd1981b2d8d958bfa60138b922504710db5e7787eca741846c59cbf573fc944e6e4ab6a22fd338661130d4e
SSDEEP

384:fz4aByBZTgqKVS53KAwClXdylLjXr69oFqbFWta:ZQZht5tPoqA4FWt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6dd3d00bad105658758db8c03fb14da_JaffaCakes118

Files

f6dd3d00bad105658758db8c03fb14da_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6a529a4e2dc16dff75da6fe1c31e9338

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
HeapAlloc
HeapReAlloc
GetProcessHeap
VirtualFree
FreeLibrary
VirtualAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ