03e6fa65e2aac7e50e19f266fc43cb7e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03e6fa65e2aac7e50e19f266fc43cb7e_JaffaCakes118
Size

1.6MB
MD5

03e6fa65e2aac7e50e19f266fc43cb7e
SHA1

cd09e9451caff0c7398ab8bcd663c445a31f78bf
SHA256

c9d9218468708929a63abf70c99705a4751a382c4ee224c73b9fa90e2337a41f
SHA512

f5b35eb31cf5e62d3a696f5334b877750ba8bd79e396bfbdd2db744a9eaa69e452b443a310bb73a2599474a2ddf3bd99bea7aeef5b4fd6f7f9a5c9ebb1268a9d
SSDEEP

24576:n7abJuPc3+qIZJTP0O5vGL+uAczyJqu/YX80Itq+MLM/qEDJ7LL6nL2eKu:7SuPoYpY/fyvtyMnDkL2eP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03e6fa65e2aac7e50e19f266fc43cb7e_JaffaCakes118

Files

03e6fa65e2aac7e50e19f266fc43cb7e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5a09fa16fe73edaf05dc213d4ecf50d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
QueryPerformanceCounter
Sleep
ReadFile
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE