1bce068e13b91733a32ebcca73018b2e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bce068e13b91733a32ebcca73018b2e_JaffaCakes118
Size

38KB
MD5

1bce068e13b91733a32ebcca73018b2e
SHA1

cb56adb464273cb7ce68dfe93d4ca9781dcdd29c
SHA256

60a20eedc1493b537b9d6097ba94aa46620c9a916aa4b57699391ee11b35897f
SHA512

c4b2809f5417824f1cb6b69abf41e1ba5241d14bea25ae93f81da891c56cb0503cc3920999c93ba13187e2039f10058618b96e2236eb551ee7522fd2aa96c239
SSDEEP

384:1C437gmQaFoJ3LAHfMQmljwRG9AB05GbZNyyvuIoBQ8WtBgfS4LWWMe:d71FFoJ8E/wG6B0oPy29B8WtBgfSbe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bce068e13b91733a32ebcca73018b2e_JaffaCakes118

Files

1bce068e13b91733a32ebcca73018b2e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5e86ce7d57e5a4b4ac2e74194d9a9d53

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualProtect
LockResource
LoadResource
SizeofResource
FindResourceA
GetStringTypeA
LCMapStringW
LCMapStringA
HeapFree
HeapReAlloc
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeW

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ