2accf42b563adf13826d1a4934e6d638_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2accf42b563adf13826d1a4934e6d638_JaffaCakes118
Size

34KB
MD5

2accf42b563adf13826d1a4934e6d638
SHA1

55c60e9a2331c3c811ad732ce84971b777290fb1
SHA256

61be0005af2cbb9fe2992ee1022c10eeaee9466dceb4d05a419070c2a99e4087
SHA512

a0d998d1b3038c4c38f4dfcc5fc847a9b53385a9bd0d0f8da7b73d157fb1743253489e21a11143c314509a51c95e7268d9e58794ab53ac5025cf835cbd2ab842
SSDEEP

768:4fqvxJLdb/TqT2pbNcQ+Vo4bE1dF99uNBhDc5HiU4NzL2c:Eq5Jx7eTxtbc99KSHiU4dl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2accf42b563adf13826d1a4934e6d638_JaffaCakes118

Files

2accf42b563adf13826d1a4934e6d638_JaffaCakes118
.exe windows:4 windows x86 arch:x86

24bd755beafead0e5b2cc36d63740c13

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
Sleep
GetFileAttributesExA
QueryPerformanceCounter
HeapDestroy
HeapFree
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
VirtualAlloc
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 710B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE