23661659f4fdc793ad2d22c54e7aedaa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23661659f4fdc793ad2d22c54e7aedaa_JaffaCakes118
Size

76KB
MD5

23661659f4fdc793ad2d22c54e7aedaa
SHA1

11c762586f36d01610984e0880b413f56a39bdfb
SHA256

13474df2fe011535c67c2694f4f0554b7a14fd9af2a9f64253cbad01790d0f2b
SHA512

aee2f5e9acc46721bf287e3f738872b01d4add74a436fca116cc8013f0d2aaa74be359ca89db49ea48e64ddcb112d1e5c51a9731b715229af4f9bfdb8a385226
SSDEEP

1536:D44hZE39rmozIZT6smTYZUUYXEk4JcNkl4Oy+:DJZy9CoUB63sZwExJcOR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23661659f4fdc793ad2d22c54e7aedaa_JaffaCakes118

Files

23661659f4fdc793ad2d22c54e7aedaa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

812c27df5aa353fe5098542519bb9907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE