63bd299486fa05a449724c73bd617bb6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63bd299486fa05a449724c73bd617bb6_JaffaCakes118
Size

33KB
MD5

63bd299486fa05a449724c73bd617bb6
SHA1

14c16475cc3f0b5889659052022c2d0bf42bff6a
SHA256

4a19c071ad018c59fc95e97b3c8d5918aac9dbdb27ef8c14f0c3420aa0ef17db
SHA512

9ca47812ae0f85d526dfe4870e536d211aeec14835b5bd4a26bd2ffaa68e93e693b75f34ca471e052c84f423a4768b5e85c71a6e76f2dde35e3e01def0b71b6e
SSDEEP

768:JRedbqvCHrNd3EXDQ7iR+BgnxHi9m8maLFwb75:82vCHrWDQ7iRXCJLpO5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63bd299486fa05a449724c73bd617bb6_JaffaCakes118

Files

63bd299486fa05a449724c73bd617bb6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

27b409f082c3051143529f0f0fe9c045

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
QueryPerformanceCounter
Sleep
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
GetTickCount
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
VirtualAlloc
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 710B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE