f720d3bbfe2f69198154035db95673a4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f720d3bbfe2f69198154035db95673a4_JaffaCakes118
Size

36KB
MD5

f720d3bbfe2f69198154035db95673a4
SHA1

f036dc4b5fae780730e9b17f061f05d644fd81e7
SHA256

60663776852432c3f521891be5ae18728aec2f53ddb3c7a9755c2db8b7fefe43
SHA512

e3511fe7db2f905e78aa3ce5d7da70ecc0b21271a85a7a7eca9085a86ffa3adb355b70b20c4f71ccc9e64224717c78de590e34cb32574f5caec3d53a40d75ea1
SSDEEP

384:y33zL8bH2ZCdXR7jj6rK9pCbMyxLb0/tS:W3zL8KgT10bMgn0/t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f720d3bbfe2f69198154035db95673a4_JaffaCakes118

Files

f720d3bbfe2f69198154035db95673a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8daf746ffb72af880e803821aca13e31

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Exports

Exports

VGmqn

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE