a385f46961425bd697d526f2bf9c8638_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a385f46961425bd697d526f2bf9c8638_JaffaCakes118
Size

80KB
MD5

a385f46961425bd697d526f2bf9c8638
SHA1

63a50a67c7f94f934c0a9d16e43f051a06024d75
SHA256

ce1a589e1e8842e68a7ca62d744fab0d585650699bd23c2cc4f5829dfed53524
SHA512

9224bd4338cf209534ac9194be44ddd1c6517e66a121ca50f31f8ef088bc1e7478d06a0df81a3a0625c89ced05e04b0dffb44b666cb66156e2c0145539b6e7e3
SSDEEP

1536:zVjPs35hmX5xt/b83oSkRqiVAD8GXN+I7fJ+aCl1fencH0:zpeYTwoTqiuzoI7h+aS1GnL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a385f46961425bd697d526f2bf9c8638_JaffaCakes118

Files

a385f46961425bd697d526f2bf9c8638_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cd1bf12b8ece5e7248f3fa67f6d068df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsW
HeapAlloc
GetCommandLineA
GetVersion
ExitProcess
GetLastError
CloseHandle
WriteFile
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
ReadFile
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
HeapFree
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
ReadConsoleInputA
SetConsoleMode
GetConsoleMode

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE