430c31f5202a867399fc5dc4ff0cc146_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

430c31f5202a867399fc5dc4ff0cc146_JaffaCakes118
Size

116KB
MD5

430c31f5202a867399fc5dc4ff0cc146
SHA1

caa77911e59355b8e7ff7dee6e6652eb31f79909
SHA256

aedc0280fde7367138ffc19cc042b0e59aa60f14a68ed78cb5270a299526468b
SHA512

cefbb69ef577b47d38d26ea6ce0bd5c2d65f5d1b9b9f57d24e036a7a6386a45d398fa629096cd6725fb7c5ebc1b0195d88e7350ef30b2bd2dd65146b55739457
SSDEEP

3072:DfnOJunM6gH1f6lzN3Mo72HhrninakeEsFtCz5Fl9d:D+un5gVfQZ8U2HhinavntCz53

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
430c31f5202a867399fc5dc4ff0cc146_JaffaCakes118

Files

430c31f5202a867399fc5dc4ff0cc146_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4cc66777f1a730d6b9a13913e8883899

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommState
Heap32ListFirst
FindCloseChangeNotification
HeapUnlock
GetDiskFreeSpaceExA
IsBadCodePtr
WriteFileEx
CreateToolhelp32Snapshot
FlushInstructionCache
SystemTimeToFileTime
DefineDosDeviceA
GlobalUnlock
UnlockFile
GetCommTimeouts
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 5KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE