68be7d3f1e72f79425c6f331b38d70db_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68be7d3f1e72f79425c6f331b38d70db_JaffaCakes118
Size

55KB
MD5

68be7d3f1e72f79425c6f331b38d70db
SHA1

5580471bc8e6e82068e6d4738205a63d5ffc0176
SHA256

43b403fc681290e4a510f5c2b148e25935b64b4c30332ea5e12cb25260ba560a
SHA512

e59d663a4d812d4575d83987cecb0f1be1c45bae862e451c3a15fa97ce507631e4a8e8e9dbf91f599e4845648b8b124a64fc72886f9578fc7bfbbd75dd577078
SSDEEP

768:ABH3XRjyfFUFXlooVh3Dl83+VWMZiK7bVKE3Htip/TWImIH6s73LDlFbTrGd+f9q:AdxeElVdNW07wEC/gIHdLDlFbT6e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68be7d3f1e72f79425c6f331b38d70db_JaffaCakes118

Files

68be7d3f1e72f79425c6f331b38d70db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eda6d2a0617fa53c189464d65a125a1e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
LCMapStringW
LCMapStringA
HeapAlloc
TlsAlloc
GetStringTypeA
GetLastError
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
GetStringTypeW

user32

ShowCursor
ScreenToClient

gdi32

CancelDC
GetMapMode
CombineTransform

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ