40087cf9c9febadc59b7d2469077dfb2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40087cf9c9febadc59b7d2469077dfb2_JaffaCakes118
Size

148KB
MD5

40087cf9c9febadc59b7d2469077dfb2
SHA1

ca70f669ac52886d70a20756f8634af5c662b465
SHA256

4807f9532f8e91530b31b7c6c09ce5581ad27210063e25c51ff914dacea89596
SHA512

3045332f3ec17255d3284bfd7a5915f96fbc8d416671e17cfddc28fb04595452ea96269bb86abea92626f20ceaddeddf3b905997944585663fe734a06b943c1c
SSDEEP

3072:5t5foppMJs5zVZz845HYxz/i8B31AH43Kh1MjQ:5v2Me5z7jYxz/1B31J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40087cf9c9febadc59b7d2469077dfb2_JaffaCakes118

Files

40087cf9c9febadc59b7d2469077dfb2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

903035e9b7e5e9e17b6636b16dc5eb20

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
lstrcpyA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 127KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ