4568b8c2f40b1bf1c84ddf91511d0d2b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4568b8c2f40b1bf1c84ddf91511d0d2b_JaffaCakes118
Size

70KB
MD5

4568b8c2f40b1bf1c84ddf91511d0d2b
SHA1

dd24d80018f323515e3298eec3d85d9766ea0f93
SHA256

87f6d8948befc5d37a7eeb99081dc96f62ef058a50918d88312add1c75c1387f
SHA512

5f34a119e436fb7bdef03f124f4422daf091e89882f23f0fead80585d5276d717958e8bc50f19e09abde4a4530741cd98d177ad5b39dac5c4d76df8b7aebcd0f
SSDEEP

1536:qfBANhouLSW3X6gktNc4aKAF65aLg5rPLGA:qJANhDJXLktNc9KAFAmDA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4568b8c2f40b1bf1c84ddf91511d0d2b_JaffaCakes118

Files

4568b8c2f40b1bf1c84ddf91511d0d2b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a331033b1e5af426e01df9230c71676e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenProcess
GetModuleHandleA
HeapAlloc
HeapFree
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
WriteFile
GetLastError
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
CloseHandle

advapi32

RegOpenKeyA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE