46445c4c3dac71cfcea840b7418e6899_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46445c4c3dac71cfcea840b7418e6899_JaffaCakes118
Size

77KB
MD5

46445c4c3dac71cfcea840b7418e6899
SHA1

78972cc9aedcbe3ab18ca995127b7785f8f3395f
SHA256

b2b8d0e206e351e11281010c0065a0b9747bdc315ccb8d5711f157e5a8e75d28
SHA512

fda971245654c7a3072bf0d94acdd16b8d0211cbc807bc35d3e329f769492d84a2b33044ff6f8fe3cd58717c69b2285fc46d1c7817949a5d096ebefbc0ec9e93
SSDEEP

1536:aeexFG7eUpjgLiWFK7szSXruqPufoZIzlZ9Be6jbo+M/3reInxvOUs+qnJfZVguC:aeexFG7eUpjgLiWFK7szSXruqPugZIzy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46445c4c3dac71cfcea840b7418e6899_JaffaCakes118

Files

46445c4c3dac71cfcea840b7418e6899_JaffaCakes118
.exe windows:4 windows x86 arch:x86

407c4cb455da1f13019e246d6586da03

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
HeapCreate
HeapAlloc
GetProcessHeap
Sleep
CloseHandle
ReadFile
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
QueryPerformanceCounter
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
GetStartupInfoA
GetModuleHandleA
HeapReAlloc
GetCommandLineA

user32

wvsprintfA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE