32370c209229357ee2c864ffe46d12b0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32370c209229357ee2c864ffe46d12b0_JaffaCakes118
Size

533KB
MD5

32370c209229357ee2c864ffe46d12b0
SHA1

7ac935ca24c27e6bcbc834ed1261bffdc80b1c3f
SHA256

91acce99d1c8d6e3b35ac3fca909c7e5d0686b2b8a13196528776c988a87799e
SHA512

74ca5b8577b73be9471d35505d60f6784486456a35b5baa4da0ff28d40a9f6906b7c13c818bf24fa1249b0c4c1eafdf7431054b6ccd28a7db9c962838bcce357
SSDEEP

12288:3efK9crp7Y/lpyAPVn0MnO0SaYIwF3uiLsY5YxjNTwZVWOX:CKep0/aA9nrhlYZRv5YxjNkZVWA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32370c209229357ee2c864ffe46d12b0_JaffaCakes118

Files

32370c209229357ee2c864ffe46d12b0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c80c72281d1efb2aeeffdac8b8485a11

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
GetCurrentThreadId
GetStringTypeW
LoadLibraryA
HeapAlloc
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentDirectoryA
LockResource
GetLastError
GetCurrentProcessId
GetVersion
LCMapStringW
GetModuleFileNameA
RaiseException
HeapFree
LocalFree
VirtualAlloc
ExitProcess
GetCommandLineA

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 503KB - Virtual size: 502KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ