196e3113a9fb1f08e89a71c78e939057_JaffaCakes118 | Triage

Sharing

General

Target

196e3113a9fb1f08e89a71c78e939057_JaffaCakes118
Size

96KB
MD5

196e3113a9fb1f08e89a71c78e939057
SHA1

cfe5a5b5b2d46a2a7a19d27890939415e6e97446
SHA256

63d79b0be48efaf39906dbf2b6547ced650ba10d20d91600d086c4d4acc41407
SHA512

8f2154f784a5c200f0600e8e5949ad68920645ae5a640b8c36f541ba616c362dc478e2c9b3472817591d1e560085e15ae6d2b7f534f5bf3d3155fa73aed4419d
SSDEEP

768:tzUbXbYwKq2qKsDIYro7VmoUMZ8QOvoG0ObpYGkTl3ZclJoSnK:tzkXbY5qc3WoEoU08QOtTbpYRh3aoS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
196e3113a9fb1f08e89a71c78e939057_JaffaCakes118

Files

196e3113a9fb1f08e89a71c78e939057_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b2a9cabfc7836057899978cf7750af81

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomA
UpdateResourceA
GetProcAddress
GetLastError
LoadLibraryA
HeapAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW

Sections

.test
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE