2796d80fc3bf12f05bcbe521fcf62307_JaffaCakes118 | Triage

Sharing

General

Target

2796d80fc3bf12f05bcbe521fcf62307_JaffaCakes118
Size

1.4MB
MD5

2796d80fc3bf12f05bcbe521fcf62307
SHA1

7d85cfb7f3885922d855f2f3b80c8ccf3cc40f54
SHA256

6849aa9785cd5c7c4903659d50545c194fe575c9cd228ba8b15b564698ece461
SHA512

49a111b4ba68b1911ebb1c4a5314b2887c3d556bb2cdb1bc83b182aaad34941ed8fbfa4b3abe43a9bae3720b4e6fc859971688443f11556b550b715356626bd8
SSDEEP

24576:O7C9ebRaNTVY32dJzpmHx7ztoTQsAhal9IvbvgZCyizYk/j1fqFf:Oe9zTG32djSHoTQ/Y6gFisk/jCf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2796d80fc3bf12f05bcbe521fcf62307_JaffaCakes118

Files

2796d80fc3bf12f05bcbe521fcf62307_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e2abc9a649d7cd49cab558d2321e2fa8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetCurrentThreadId
GetLastError
ExitProcess
WriteFile
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetSystemTime
GetFileType
CreateFileA
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
FreeLibrary
HeapFree
HeapReAlloc
HeapAlloc
GetProcessHeap
SizeofResource
LockResource
LoadResource
LoadLibraryA
GetProcAddress
GetEnvironmentVariableA
FreeResource
FindResourceA
ExitProcess

oleaut32

SysFreeString
SysReAllocStringLen

shell32

ShellExecuteA

Sections

.avx��
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE