3879131f8fd4fc0d6a95a9a45b0fe9a4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3879131f8fd4fc0d6a95a9a45b0fe9a4_JaffaCakes118
Size

42KB
MD5

3879131f8fd4fc0d6a95a9a45b0fe9a4
SHA1

19cc7c446524c61c7e6c1206986ee9abf7bbe5a3
SHA256

c5d15207a900d39702d72f80f0826be236a4f5ea3d0463e506ca8f1d3e9bbace
SHA512

8060acd34cf29ccefa6586fefad4980fae44355ce4a8acd1595d3d5dfbe8bd91a97b6672a10c32a4960785859fdf5f2ab6338048651187d906e6ee7349a89874
SSDEEP

768:ipy/31oFvIq2ikuwzhODdE22+tBMXAORg0f74L7+oUyBF9RZO80bsvLQk:i0YIq2ERhBMF7k7tU8zWb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3879131f8fd4fc0d6a95a9a45b0fe9a4_JaffaCakes118

Files

3879131f8fd4fc0d6a95a9a45b0fe9a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c43c9ecbd9ae06b0b77d5d29606f3766

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimeAsFileTime
RtlUnwind
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
ExitProcess
GetStartupInfoA
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetConsoleCtrlHandler
GetConsoleMode
GetConsoleOutputCP
WriteFile
GetLastError
MultiByteToWideChar
ReadFile
GetConsoleCP
VirtualAlloc
VirtualQuery
CloseHandle
SetFilePointer
SetStdHandle
WideCharToMultiByte
DeleteFileA

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE