1698e7666f2995e6e186deb75b0c3e4c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1698e7666f2995e6e186deb75b0c3e4c_JaffaCakes118
Size

37KB
MD5

1698e7666f2995e6e186deb75b0c3e4c
SHA1

7fbdc15f09be6f935455c130be3f1b684459c5d6
SHA256

95025c2ea470aba685edc4d76085ce34eb2a30c7408f543d347d85a7066b3191
SHA512

7ac01ad9a1817d9343ecb5314ba71e661d41d5ec8b1e110e0b414436ccdffdfafbdabfdda7a6fad4fb8148552121fe85d4bbff39391f7d4c35eb75d12960ec61
SSDEEP

768:CHE+/hqYK5sma75x54bQfRBUhAanQu+enFck7/ahKXnXnMr:fIhIsVtRBUFnf+en6Cln3Mr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1698e7666f2995e6e186deb75b0c3e4c_JaffaCakes118

Files

1698e7666f2995e6e186deb75b0c3e4c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

55d619f8cc6671d11b12dddcc8269c47

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
CloseHandle
GetProcAddress
GetModuleHandleA
ExitProcess
LoadLibraryA
GetModuleFileNameA
GetCommandLineA
HeapAlloc
GetProcessHeap
HeapFree
GetStartupInfoA

user32

wsprintfA

Sections

.text
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE