355e4672296d0afcc22b3e7eb5227192_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

355e4672296d0afcc22b3e7eb5227192_JaffaCakes118
Size

182KB
MD5

355e4672296d0afcc22b3e7eb5227192
SHA1

6fbf2ec9efe787c4af8e49ddeb551d14d71532ec
SHA256

a21eac44e0d18b61f374509f80e719aae6ef113b7b69f416870a0db7145e3741
SHA512

134c0957fdf22fe45a3e8103fb1a1f882a29d7ecc6d4196f4be209a67447d729d3487ed1abf76ede4eab53a3d73d37cd39b9ffaca7b2ab9c4f26a3e3c1832d18
SSDEEP

3072:ixegaIKZ0EBimpAlEAwE5hjS1xRM7V0dv2nW5TkCuEXS7HDKFVlQMbB8O2IeaGGy:ixehZ0SLSEyn21xc0dv2nW5BuE2HDKpq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
355e4672296d0afcc22b3e7eb5227192_JaffaCakes118

Files

355e4672296d0afcc22b3e7eb5227192_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a567f5526eb438304887cc6d3269eda8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
lstrcmpA
GetVersionExA
HeapAlloc
lstrlenW
ExitProcess
WaitForSingleObject
SetUnhandledExceptionFilter
HeapDestroy
SetLastError
GetModuleHandleA
HeapDestroy
FormatMessageA
GetLongPathNameA
LoadLibraryExA
VirtualProtect
HeapCreate
FreeLibrary
CompareStringA
lstrlenA

Sections

.text
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 535B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 85KB - Virtual size: 332KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ