0edf5f3b1c855737a093da7a0802e52a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0edf5f3b1c855737a093da7a0802e52a_JaffaCakes118
Size

489KB
MD5

0edf5f3b1c855737a093da7a0802e52a
SHA1

89c3cff51b459b8e577a7ee0ace0f0d53ee78d9b
SHA256

2a53407bdf9dfb065088d028bcbbe9df63d2c9c8d673958f2380fd0c1c921674
SHA512

525ac6d3f47954956aba20b253104d98380788a6e3497915db2e66a79d4c28cce01988c82b1241f77d679f14e773656106eb95dbf307129489c920fe378fd1b4
SSDEEP

3072:XeEu6WKmkyml/4E0/HZXj4YWriSqEqh7DWVE2solIJrmpCQry53a957cID4z:QZXVHE3YFb7SFsol1C0y5+7cID4z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0edf5f3b1c855737a093da7a0802e52a_JaffaCakes118

Files

0edf5f3b1c855737a093da7a0802e52a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7c1edcd0d372049a9b16862514542647

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
Sleep
GetTickCount
GetStringTypeA
LCMapStringW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
GetStringTypeW

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 443KB - Virtual size: 443KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ