5edcb2fed91c999421f1ab8ffd47d5a4_JaffaCakes118 | Triage

Sharing

General

Target

5edcb2fed91c999421f1ab8ffd47d5a4_JaffaCakes118
Size

40KB
MD5

5edcb2fed91c999421f1ab8ffd47d5a4
SHA1

af426384d06536b0158fc61edab72044a685e9de
SHA256

c765f13a90890e36805574946185f33bf39b7ff899a39560ffbf117bad8252fc
SHA512

8bb1baf9f45bed9a1f7129269142dded22f41bb2617bbcf15812b6cb055712e9b8f407a43e141d66f94260c1fb8366f2bd3880d7d405b7fc0c1f5feda3e7647b
SSDEEP

384:dvk+mGe7tC5H1w6ayt48DBVB+yb7rF6oZbGqEtwxpxxBe:pk+eszBVIO/F6osqUE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5edcb2fed91c999421f1ab8ffd47d5a4_JaffaCakes118

Files

5edcb2fed91c999421f1ab8ffd47d5a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4f5c6eb2e577003d67473ac2d4ca3f25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE