69a18896c7ed12d6d961e255b06b34c8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69a18896c7ed12d6d961e255b06b34c8_JaffaCakes118
Size

38KB
MD5

69a18896c7ed12d6d961e255b06b34c8
SHA1

760c41a6a43f0bc62003da212835ebaa0fca0609
SHA256

834e9a90e9dc94bac3aa18b93f8125d719ea6440a8ad454913632911596714eb
SHA512

ea04d6d71926b92b429b5e8c874a5203f3d928c0da59c826efe82a1ada5536c7764a4c9958ec0dcc9db7a90fc8e80f3049d11543bdc5c7d8d6729a151105db1a
SSDEEP

768:X5y3ikdb5FcjdjkRU9WAbL2RL78eH+BGHvlJm6y5puFcJvYwhKtpFTOoXHpuddFs:py3D9Fcjdjkq9WAbyRL78ePWpacjKEmj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69a18896c7ed12d6d961e255b06b34c8_JaffaCakes118

Files

69a18896c7ed12d6d961e255b06b34c8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b6bd06c31d7ad8ff86d69441d268ccfe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
Sleep
QueryPerformanceCounter
CreateFileA
ExitProcess
GetModuleFileNameA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE