050a72136b47f54c8a7f9a48f4e53e9c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

050a72136b47f54c8a7f9a48f4e53e9c_JaffaCakes118
Size

40KB
MD5

050a72136b47f54c8a7f9a48f4e53e9c
SHA1

f95cfba1ebeb81d01d23ed542b1486328dac4eee
SHA256

9422aa59be4ed4d9336ff4cccbf61082389a482181b33485fe89b88bca1554c1
SHA512

a7d49a6bebe64f52090bc859c0bc123cdcb6056048f77b538bbe058b66e86b6e4894e3a88e2bf74d126a55fce8eaa34b8819ec01b0005584014ec959131c2220
SSDEEP

768:4hNr33ZikBK4iB9Q5nhyuOozMTDT/RmsDy:erHokBK2nuokf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
050a72136b47f54c8a7f9a48f4e53e9c_JaffaCakes118

Files

050a72136b47f54c8a7f9a48f4e53e9c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e837c557391df459a62a738320740523

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetVersion
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE