07a56afc34ca45854542f5030f19c7e5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07a56afc34ca45854542f5030f19c7e5_JaffaCakes118
Size

31KB
MD5

07a56afc34ca45854542f5030f19c7e5
SHA1

853b33a7894ccb876f5ac947398511808175413c
SHA256

1392b12c4345b41bbfc5f108705302a72442f45b3c9e5e6292dbffc9096757cd
SHA512

a556dc01bc2d718c1f11960dd8e1ddff447a08ba5f2952edb47c7a22d7b4566fce505025d661207fa077259808e2970b03ee289cd5689a2b8a0e37b36126f921
SSDEEP

768:jFIdb+vpdPMVBG8rjsb3NvkH0cPBxiC+Kzm1oKg:Aiv4VBprAblIn5xhzSg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07a56afc34ca45854542f5030f19c7e5_JaffaCakes118

Files

07a56afc34ca45854542f5030f19c7e5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7bb820f7138e5e3c617c9b1e5764eebf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
QueryPerformanceCounter
HeapFree
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
Sleep
CreateFileA
ExitProcess
GetTickCount
GetModuleFileNameA
VirtualAlloc
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 710B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE