03810090a37710254d337583c7d85dd3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03810090a37710254d337583c7d85dd3_JaffaCakes118
Size

32KB
MD5

03810090a37710254d337583c7d85dd3
SHA1

6f42aa71844f3e307dc4282e17d5761fd9d4e707
SHA256

d649b8373b458d4d2919c51eec79e15fcdb09486a68f08d3c41abe4001bc927c
SHA512

7ee012ca9b07cb5fd8ca1d77d8749c5ab9a858267748cba84b3aadb4decc619a733e910a03a803b42d09ad67b83f8e7245f8a4b57d6665c996f4f0f4fbe0ebd7
SSDEEP

384:uvFJs/mJTNVESz+30bX1pym4mlPTX8yJ+9bborjHEo63aM:urvNVEv30BpvDU9bijHEo2a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03810090a37710254d337583c7d85dd3_JaffaCakes118

Files

03810090a37710254d337583c7d85dd3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bcf5b77aa058f55d1060153de4871d54

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsA
LocalFree
LocalAlloc
GetProcAddress
GetModuleHandleA
LoadLibraryA
WriteFile
GetLastError
SetFilePointer
CloseHandle
CreateFileA
ExitProcess
GetVersion
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameW
DeviceIoControl
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
GetModuleFileNameA
WideCharToMultiByte
VirtualAlloc
HeapReAlloc
FlushFileBuffers
SetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE