2acf7b2b60960cc0c347b172a2484ebf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2acf7b2b60960cc0c347b172a2484ebf_JaffaCakes118
Size

28KB
MD5

2acf7b2b60960cc0c347b172a2484ebf
SHA1

ff92767d8a6a103b27963dc0fd41d17553855f97
SHA256

5cc5558bb9e6f332b1cde767adc6ecb464b5536349367a9c6bc6f1caf243d313
SHA512

c4dfc425821da7ebeea229cc39dd30b66d7f8260b2de7da4696754eeb4e83408b9df3cf091a532477922b144b59a33c89700e3284b1f708047098db6476716ba
SSDEEP

384:r3/uHfMfuHpYmloNGfooyuCyeppYKl7tToVYupZoZin:r3WeuHaobC/8+tTLupZo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2acf7b2b60960cc0c347b172a2484ebf_JaffaCakes118

Files

2acf7b2b60960cc0c347b172a2484ebf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58a2567fe03cbd6c4d3faced9e74977e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

URLDownloadToFileA

kernel32

RtlUnwind
GetStringTypeW
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetLastError
GetFileAttributesA
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
HeapAlloc
GetExitCodeProcess
WaitForSingleObject
CloseHandle
CreateProcessA
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
CompareStringA
CompareStringW
SetEnvironmentVariableA
LCMapStringA
LCMapStringW
GetStringTypeA

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE