67dc051c7f60d110044a6f4833196930_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67dc051c7f60d110044a6f4833196930_JaffaCakes118
Size

35KB
MD5

67dc051c7f60d110044a6f4833196930
SHA1

12f5aeb8eb0ddd2aa4c16a7b49cf7e9a79571916
SHA256

5429e86adeceeee067c2ad68f071957c6c5ac006cb2875d4e65efa667021737b
SHA512

7e5c94893caa6893fd4010425c1b8779d878f6ec35d2028d22826763f7ece508e70117c398bd61f5c8bd913d8e3e3ee5536d52e6b5f5cdd84d58b70e74299ffd
SSDEEP

768:lAGvvvICpGdbeQ5mpCD9aojBnAE9tGJjsGt7d/jgDfz0YJDPyIP/:CGAssCQGCkodnA73jj3YJDKIP/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67dc051c7f60d110044a6f4833196930_JaffaCakes118

Files

67dc051c7f60d110044a6f4833196930_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a396b638b0b7f26b6a155794b30e30f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
GetTickCount
HeapFree
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
CreateFileA
Sleep
ExitProcess
GetModuleFileNameA
QueryPerformanceCounter
VirtualAlloc
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 710B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE