21f0be5f22c2020645323c1b2c740e30_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21f0be5f22c2020645323c1b2c740e30_JaffaCakes118
Size

30KB
MD5

21f0be5f22c2020645323c1b2c740e30
SHA1

1078157f7b3d4a2df062c9e89ec9263025124d95
SHA256

02304e3fcff859bfa02a26b053eeb6c35c1d5945411b01e1d24d964bdc14c2d5
SHA512

69355cc97400b9fd1cbcc417dd9e398bea886281e7c8306565f90ed0f7b928ff467a6505ec5f051bff98321f0706b2d9bf6f7fac01a4b1ced8ec25d1878a24c3
SSDEEP

768:qaHzdbHvYFEHdpBkxAkRlqDMytp5bzWk5d5OHIo2Eh+tPjnA:1ZbvqE+xA3DMyndzV52Io5h+VA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21f0be5f22c2020645323c1b2c740e30_JaffaCakes118

Files

21f0be5f22c2020645323c1b2c740e30_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0d972aebf11e27a7cdbdb64ce6419117

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
Sleep
QueryPerformanceCounter
HeapCreate
HeapAlloc
GetProcessHeap
GetTickCount
CloseHandle
ReadFile
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
VirtualAlloc
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 710B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE