0e2ff8fc543f338790a2534dc6a36b40_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e2ff8fc543f338790a2534dc6a36b40_JaffaCakes118
Size

38KB
MD5

0e2ff8fc543f338790a2534dc6a36b40
SHA1

6ce9e6700c0e13e3dd2fb9045db77a782c7e1cb7
SHA256

a4d72d158ec542a50cb86a6907607f8a2fb2bb395579222c140509c7603643f8
SHA512

eabfd349e620e0ec767b1d139da0c8171e65e92a5c0270cc9b8354bc1b3977037220d81cc793f2a1e3bfafe10920b366de2385f8beee08f00c778d4c1f3c7d62
SSDEEP

768:XFTT5UdbSexuvuFT2rZ+DdeGZJFyHlD4BccPIi05uTGgpseV6mX6+VK80Ro6N82:VTTwmexu2FT2rEDdeGZJFyHJ0IFA6s6j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e2ff8fc543f338790a2534dc6a36b40_JaffaCakes118

Files

0e2ff8fc543f338790a2534dc6a36b40_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e636ad2f05ffdd9a0003ead226997bfd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
QueryPerformanceCounter
HeapFree
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
Sleep
ReadFile
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE