21b9dda4e61bbffde9bf09d9b32e034c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21b9dda4e61bbffde9bf09d9b32e034c_JaffaCakes118
Size

92KB
MD5

21b9dda4e61bbffde9bf09d9b32e034c
SHA1

df84a598786cfccf53873a85cda1bef74b800210
SHA256

3d145450025d555d59382417c27a18d7a289f1420de5d05e4a21ee937145da4c
SHA512

b38a2e3a362e3c2db8f7f37d489b8ec905977de9c2f21749c7f273a6f8d21c194084916b66ec8247f51912570fc9d6a06f75572afe423c2e8dc98b488c6b76e6
SSDEEP

1536:kEM0uotSvvLjv5lhmd8SjiqJYGqOfEgX6jgDQMKfI+86PwzhNdD9O:20uotSnPvcyIiqJKDgX+sXKf55axE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21b9dda4e61bbffde9bf09d9b32e034c_JaffaCakes118

Files

21b9dda4e61bbffde9bf09d9b32e034c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e28948fc22fa0269cc94221d910994c5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpA
GetModuleHandleA
ExitProcess
TerminateProcess
GetProcAddress
LoadLibraryA
GetCommandLineA
GetVersion
HeapAlloc
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ