49d9cf1e8d3c1343d29c070bd0e67ffc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49d9cf1e8d3c1343d29c070bd0e67ffc_JaffaCakes118
Size

40KB
MD5

49d9cf1e8d3c1343d29c070bd0e67ffc
SHA1

298744daf54093e0fbafe4e050e787aa02d45f10
SHA256

27595f8a1846352419235949266c5bb77a0af10991ad8d370482379d8c7991e1
SHA512

5e99d92eecb94e12c33c7abd3814ced03d4623ad6d58f9e7e9b4d5b314be572e8cdb6613a3a3aec096581478bc259201dd87985c5cc873a06c2cae859a8d306c
SSDEEP

384:yZ3B90BDAgEGcRM4cT+myy0PRUGf2v1d9Sk7K88ChuO0FsygPEW0lZtU:yZ3BQDbvA7cCmV+kB7JUs7Mll

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49d9cf1e8d3c1343d29c070bd0e67ffc_JaffaCakes118

Files

49d9cf1e8d3c1343d29c070bd0e67ffc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

14cf6cb57681e6e10b18ebcdb0e7e330

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoInitialize
CoCreateInstance
CoUninitialize

kernel32

HeapDestroy
GetStringTypeW
GetStringTypeA
LCMapStringW
GetCommandLineA
GetVersion
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
GetLastError
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetFilePointer
CloseHandle
SetStdHandle
MultiByteToWideChar
LCMapStringA

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE