433d61d9174da3a25185e9c00e0ee80c_JaffaCakes118 | Triage

Sharing

General

Target

433d61d9174da3a25185e9c00e0ee80c_JaffaCakes118
Size

65KB
MD5

433d61d9174da3a25185e9c00e0ee80c
SHA1

f1abfa4d79f86b389d3ab5dba7baefc15b8bf538
SHA256

4b8adde8b04d565a7820ffcd3c8fc26abbb9dd2e7d8abb589aeb51f0966acd72
SHA512

46b2c71638852e8768badc1761cc187abe3199a7d78e0bfe158e28b40331548f9b0f614e95fdbb7396e26187d160c39d539bd382cd141fcd16debe139003ba78
SSDEEP

1536:1rAkOyxKDjuJMi2DSyNlrOPqTRioy+w2TQ+0NBo:6VyxK3m+J+qToohLQ+uo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
433d61d9174da3a25185e9c00e0ee80c_JaffaCakes118

Files

433d61d9174da3a25185e9c00e0ee80c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8cf2375491e257d65da71e5d263d7df7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE