083a6f47e8f5076e7772e908c3d25589_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

083a6f47e8f5076e7772e908c3d25589_JaffaCakes118
Size

41KB
MD5

083a6f47e8f5076e7772e908c3d25589
SHA1

9041dd4423426ec11184beb40b6d5000adbc0a73
SHA256

787a268825bb98a33ae0448041b25209a144a7e536a15a78ed53c0f7520db9de
SHA512

09d9eca1a1b5fc55574078e333b873fbfbfbfa9c1ce6a7d031ee52db30f55a0b1b9e50ad30f0d18c77fce001ba516aa9c17bf9c9f4e320271810e66953ea0e8a
SSDEEP

384:msing9TIjS2SUnmlWGGjIUFiSDLOVQyKl0ckBxxAGxADl5vlWlUK3tLqQ6MrenPJ:mbglIj+O0hsq2EprAT8X9LBRanPhdbl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
083a6f47e8f5076e7772e908c3d25589_JaffaCakes118

Files

083a6f47e8f5076e7772e908c3d25589_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f2680a1b489908b7708ce31edc6b314b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
WinExec
GetCommandLineW
GetCommandLineA
CloseHandle
GetLastError
GetStringTypeA
LCMapStringW
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetStdHandle
FlushFileBuffers
MultiByteToWideChar
LCMapStringA
GetStringTypeW

shell32

CommandLineToArgvW

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE