629edae7cb023bb783890c77305fcf2c_JaffaCakes118 | Triage

Sharing

General

Target

629edae7cb023bb783890c77305fcf2c_JaffaCakes118
Size

92KB
MD5

629edae7cb023bb783890c77305fcf2c
SHA1

3ab3f349035dcea1a28f67fdb4ae807c549684ed
SHA256

96a7f125b200c2aca8af9e58ea6710a9f52e0963bec5cc2093ce28e354c63e64
SHA512

6d5630883882887402d6914164155d75d07d3b2177bc39d1dfeaa086b2a63e8ce45a1f49c34160092d6f0c17d8acb9da0c40de61080c35babf776beb4ced7640
SSDEEP

1536:YAxeElzyUhRUuyTgLMk2DaTvLvpH+hhTQ2+7Sn7qdZ9h4MVSDoL:YcxlzBsh0gJavYv+7oqdZ3HVS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
629edae7cb023bb783890c77305fcf2c_JaffaCakes118

Files

629edae7cb023bb783890c77305fcf2c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eda6d2a0617fa53c189464d65a125a1e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
LCMapStringW
LCMapStringA
HeapAlloc
TlsAlloc
GetStringTypeA
GetLastError
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
GetStringTypeW

user32

ShowCursor
ScreenToClient

gdi32

CancelDC
GetMapMode
CombineTransform

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE