477d15ed2ec78dadd562e15c0ae239e7_JaffaCakes118 | Triage

Sharing

General

Target

477d15ed2ec78dadd562e15c0ae239e7_JaffaCakes118
Size

25KB
MD5

477d15ed2ec78dadd562e15c0ae239e7
SHA1

36a53361c15701df7c0887fbb1aa0bb3773c8723
SHA256

18feed052c86030163bc7343beeab94aea727e10ba96ccbc0fd255b0e66f1860
SHA512

e0d1cfd8732f87d92a96b141eba6ecaeb191ad2fd6bc7b2cd4324c66c906593ca762c124c3fb931b67b7acd152f796c4e9da72038b66cd7b870e172dbbaa7b66
SSDEEP

384:yHIYMLZnAYj6U3Zs0O0di/hT8m6x3s8w9qFAW3l+mlFDmmUyFkrh6oZ:TYslf3GN2/1GqJDUsKh6o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
477d15ed2ec78dadd562e15c0ae239e7_JaffaCakes118

Files

477d15ed2ec78dadd562e15c0ae239e7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

812c27df5aa353fe5098542519bb9907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ