03e74d964460b821bf01ca57dd0122c5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03e74d964460b821bf01ca57dd0122c5_JaffaCakes118
Size

6KB
MD5

03e74d964460b821bf01ca57dd0122c5
SHA1

37d64918e8117d14b39beec67e1fcffe53ce3118
SHA256

968ac018854d227db2756806f28d4fad7b8693f520e27c9e07656a1dcd2cc379
SHA512

5da8b943e60ee82f5944a240634de775206727a07584f7142387ac13bb921180850b07b2ff5368d34ff98ec8a8312fa6a9dd8774bab6fe8191176f24b508c07d
SSDEEP

48:6KjloQ/K11Pht1rUyKXD9xp4QhVIcxgQVZpRo5l9b4ZMAhgLVIrCV7xQ+hBDNj+y:DCPzWyqUPl90ZMEaVnV7xQ+hWhGvHs8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03e74d964460b821bf01ca57dd0122c5_JaffaCakes118

Files

03e74d964460b821bf01ca57dd0122c5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dd072bdabed766e68ac24f6bb09f1ea2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
wcslen
wcscpy
wcscat

kernel32

GetModuleHandleW
HeapCreate
HeapDestroy
ExitProcess
Sleep
CloseHandle
InitializeCriticalSection
GetCurrentProcess
DuplicateHandle
CreatePipe
GetStdHandle
HeapAlloc
CreateProcessW
WaitForSingleObject
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapReAlloc

shell32

ShellExecuteExW

winmm

timeBeginPeriod

Sections

.code
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ