71c2d7ef381a375d50078b029faa07d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71c2d7ef381a375d50078b029faa07d8_JaffaCakes118
Size

300KB
MD5

71c2d7ef381a375d50078b029faa07d8
SHA1

268e158a726dec7097c264a9f924673fa758ef9f
SHA256

0555f7c7f2953dc40ec78d0f671362441c8dab19ef987328857ad6439609bea9
SHA512

982e307637ea0154138ea1d8616d325589b712dcb895a6660be561fe1a86ee55b38812bf3f12c09e0c19568e9af60a058eac61dd3a39945b37d7036773415da3
SSDEEP

6144:OmpxsI8AU/UALtR73qMTyv41ssRyYBuEw5JcBbor9m/a1sNxybkaoYnBVq:OYsI8NB/621RyYBwUmmyguq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71c2d7ef381a375d50078b029faa07d8_JaffaCakes118

Files

71c2d7ef381a375d50078b029faa07d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3e8caa085506edcffd5b3d7a6bf6efdc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
HeapCreate
QueryPerformanceCounter
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
Sleep
CreateFileA
ExitProcess
GetModuleFileNameA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE