010bd46a2a99a05befdf7d1d69903fc6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

010bd46a2a99a05befdf7d1d69903fc6_JaffaCakes118
Size

3.1MB
MD5

010bd46a2a99a05befdf7d1d69903fc6
SHA1

6dc92d17777743a934d6e879c14d9e3481261fff
SHA256

bdcc407f1eb714e476ab382e40990d27808df64ffb354427e8b4325f80ddf87c
SHA512

fda78b0251e783fd9e04bc69b71db62b042bad14f96b34030f3470d5f56adc3ac3b806640a8e14114bbd60eb6de78d3846e40f52a7fec5dc371b897fd12efc72
SSDEEP

49152:nY9MWFHW4vzYvTWixCzbph20fotjaFCZ4ENic5W6THWo:sDF2OzYvTmzbpZQtjaFCZ4EEc5v2o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
010bd46a2a99a05befdf7d1d69903fc6_JaffaCakes118

Files

010bd46a2a99a05befdf7d1d69903fc6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b144870e3a37e200b228432e9ff61d95

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
QueryPerformanceCounter
ReadFile
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
Sleep
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE