287676cc71672986d84937a9c0b18530_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

287676cc71672986d84937a9c0b18530_JaffaCakes118
Size

32KB
MD5

287676cc71672986d84937a9c0b18530
SHA1

f8d6b88cb2f5d1ed15584826a84156d1618e7355
SHA256

c58497b36ca3166f08b734b3a3b73dacfaa66f8d09b995c97161226fdd73d699
SHA512

53a685cf01e5ab10fe119b045cb8444261b2e2f71cd62af6174b87c362346973cae96c1bf2f771af1c7a8f8951a46926efd6f4e226c1b332e5713a0fdfef88aa
SSDEEP

768:qXJVHLwJ0xEBY6C3FgV7U2yAmma0f8PQ:cJVHLwoE+62Fk7By0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
287676cc71672986d84937a9c0b18530_JaffaCakes118

Files

287676cc71672986d84937a9c0b18530_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d1718ea24355d23c57ceeefec68e969e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
GetLastError
ReadFile
WriteFile
HeapCreate
CloseHandle
SetFilePointer
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
HeapAlloc
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
FlushFileBuffers
SetStdHandle
CreateFileA
GetProcAddress
LoadLibraryA
SetEndOfFile

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ