367980d9b031ecad1154bc2ff9d355b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

367980d9b031ecad1154bc2ff9d355b8_JaffaCakes118
Size

44KB
MD5

367980d9b031ecad1154bc2ff9d355b8
SHA1

ad98f58829f4c13b35b51f9716d6884fa20b25fa
SHA256

9f516627f34c7cf91a62e05b9541046495244f2c449b64dedc186070e5750e85
SHA512

38d4862c9f76f0cbdb964857c402f7407b33ae0c63c0197ba62b813ab83a5ea07ee1f41faa621ac1f4c3a29c06a23c790e112115d4bd91057141e69d5a68c554
SSDEEP

768:goeYAAWxQFsjx8F6oyop2gJaZ27c7LHu6KCQ:gojATjhoyO3JaZ+cP2C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
367980d9b031ecad1154bc2ff9d355b8_JaffaCakes118

Files

367980d9b031ecad1154bc2ff9d355b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3c2217fcb23eab42b253c44833172ee6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE