f43c8c791fc384bef49da20529919eca_JaffaCakes118[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f43c8c791fc384bef49da20529919eca_JaffaCakes118.exe
Size

36KB
MD5

f43c8c791fc384bef49da20529919eca
SHA1

821d081526e34c64cf2f940edf39839c1405ebc7
SHA256

0c70fb7bf6560a875d11132b8561e1550ee28c2f3daa3a21f4d5cf8089e6545e
SHA512

2fff467f7273b7e410c164b2a1e729562e5115ca30b7e2ce8415e9c95545ab66eafcae35abb4f7584293d710c438e37254ada55aeb9b9d77601bb8bf45844571
SSDEEP

768:NqQoj/dSzNVQ1mDNJWbKEdBMQXQ3Cn4eQQ5rcwxY:MQoj/YNJcAQ54

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f43c8c791fc384bef49da20529919eca_JaffaCakes118.exe

Files

f43c8c791fc384bef49da20529919eca_JaffaCakes118.exe
.exe windows:4 windows x86 arch:x86

0c93a546ce014b95ee53a00e9f2ffe55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetLastError
Sleep
GetLocaleInfoA
GetStartupInfoA
ExitProcess
RtlUnwind
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
GetSystemTimeAsFileTime
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetConsoleCtrlHandler
VirtualAlloc
VirtualQuery

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ