154af4303e550322a0658e7a2ec29883_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

154af4303e550322a0658e7a2ec29883_JaffaCakes118
Size

42KB
MD5

154af4303e550322a0658e7a2ec29883
SHA1

1be5de46b7ef8a81b7b5c6a95abc527d0eed1daa
SHA256

d3907d1ff328b3878f8bf47f0b7ed5f936a1e9a0b6690a54f4261154d669ac9b
SHA512

50982cc145408285156d8b13c6ef548fc9b04ee48629a3a022ceb8e199f623e3eb200cc61e02081c3785a35f398d3d94aa8eb2e62a1da78d8cbb50aa00ea5cd4
SSDEEP

768:Z4B31o4fIi22tugShODdE22PtBM0AORi0P74b7+oUyBNQJsml0WGvLQk:ZK5Ii2gROBMy7U7tU8+yW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
154af4303e550322a0658e7a2ec29883_JaffaCakes118

Files

154af4303e550322a0658e7a2ec29883_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c43c9ecbd9ae06b0b77d5d29606f3766

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimeAsFileTime
RtlUnwind
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
ExitProcess
GetStartupInfoA
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetConsoleCtrlHandler
GetConsoleMode
GetConsoleOutputCP
WriteFile
GetLastError
MultiByteToWideChar
ReadFile
GetConsoleCP
VirtualAlloc
VirtualQuery
CloseHandle
SetFilePointer
SetStdHandle
WideCharToMultiByte
DeleteFileA

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE