5d6b9fbac01c49e8e4468d06a16497e2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d6b9fbac01c49e8e4468d06a16497e2_JaffaCakes118
Size

40KB
MD5

5d6b9fbac01c49e8e4468d06a16497e2
SHA1

05f2093f0bf53c79e80500cd2093c867b0f97b86
SHA256

4dff19b03686e08ea2abbac23aa33ecd45514af0fe6f6bc52e1eb1f77a7b5f4a
SHA512

0b359fef19f63e53470ff97ba309d22b099c39cf4892c646219ce51797c7a60426cdb0b366c5bafdf37d063cf4ad72b7bbd2bc9c1eab8278e0b3588e6bf8333d
SSDEEP

384:0GcM6xDTHf3mhawCPx2zlcgcdn2Zl2CBCbopBAFytNVyg2+rF6oZ:yM0DT/3mhadZYTcIZlh5V7F2wF6o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d6b9fbac01c49e8e4468d06a16497e2_JaffaCakes118

Files

5d6b9fbac01c49e8e4468d06a16497e2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4f5c6eb2e577003d67473ac2d4ca3f25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE