220e58e8ee10065a7219419c473a18c5_JaffaCakes118 | Triage

Sharing

General

Target

220e58e8ee10065a7219419c473a18c5_JaffaCakes118
Size

20KB
MD5

220e58e8ee10065a7219419c473a18c5
SHA1

bd956d8674a6362d84d7982cc3a209af7173955e
SHA256

d5d2de8384aab2f258395a5d23f8f198ab1bef8a045af27d89b65bcedeb6f953
SHA512

98408f87741978056912610097e27a3b436a888faf2dc9ba6952c30a3d0fa9907c4c3d42f28b4031af44748dc4336c24b43be21f5602fbb842b1f4df8497ae1f
SSDEEP

192:02gcWLSqc/HhXVrUm49TZZH3N8e1SRcWZCLV6Jo4fc++wRncCp:1D6E/H/rUt9TmfcWZHJvL+2nJp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
220e58e8ee10065a7219419c473a18c5_JaffaCakes118

Files

220e58e8ee10065a7219419c473a18c5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0f032a8f052196802ab65edddd7bb92f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

kernel32

GetCPInfo
WideCharToMultiByte
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
LoadLibraryA
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapFree
HeapAlloc
VirtualAlloc
GetProcAddress

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 823B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 886B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE