47898a6b28fac5a1607490c29d78a1ab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47898a6b28fac5a1607490c29d78a1ab_JaffaCakes118
Size

48KB
MD5

47898a6b28fac5a1607490c29d78a1ab
SHA1

abf20b7b48576d9188507ce8a794b6fd223e9153
SHA256

1764d726121ccd31400c93295d8ccf19b45bb73127b87eb45804791c5dce352e
SHA512

8f219677154c7f72de4a4584d7e5e39101594426e743e45e6b1e0063461afb15c21de01691a5e084fa6638024931386213f32fac68f8965aa7c5b55863db1c10
SSDEEP

768:r01ev7VZ6asiB9Z28l3R0RlxIrfOh3HproZ:uuxoaK4clefEpro

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47898a6b28fac5a1607490c29d78a1ab_JaffaCakes118

Files

47898a6b28fac5a1607490c29d78a1ab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8dd9a8cfdd1ad65198982f1591921f8c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
RaiseException
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetProcAddress
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
WriteFile
HeapAlloc
HeapReAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE