7010a92b40c1cc45a1e461c727c5ea11_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7010a92b40c1cc45a1e461c727c5ea11_JaffaCakes118
Size

1.9MB
MD5

7010a92b40c1cc45a1e461c727c5ea11
SHA1

3b3c049e75db7e532487e0abecbb1edfea9ef58d
SHA256

b294bd24aa9fac23bcf4af9224b5889ab872ad3a92593b4e1795f8baa427c324
SHA512

a02beac6c17f3e3dcbe11d3a0383a421ac5ce38494fe37113dd96b26507cfefa137e90197d81f38c100d2fbe274526b1c2b7b9a89104d4353c5022947ff23234
SSDEEP

49152:HTH7LpXnzjWxm04RVJnC5smPukqZ0FO/1Z8:Hz7J/E4j0WmV8P1Z8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7010a92b40c1cc45a1e461c727c5ea11_JaffaCakes118

Files

7010a92b40c1cc45a1e461c727c5ea11_JaffaCakes118
.exe windows:4 windows x86 arch:x86

33230cf2a8b23d270c3cc8f0a849dfa8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetModuleHandleW
GetUserDefaultLCID
GetSystemDefaultLangID
GetUserDefaultLangID
GetModuleHandleA
GetLastError
GetCommandLineA
GetTickCount
GetSystemDefaultLCID
GetCurrentProcess
HeapAlloc
GetProcessHeap
lstrlenW
GetStringTypeW
GetEnvironmentStringsW
FreeEnvironmentStringsW
CloseHandle
MultiByteToWideChar
GetStartupInfoA
SetUnhandledExceptionFilter
VirtualFree
TlsSetValue
GetFileSize
LCMapStringW
TerminateProcess
CompareStringW
SetStdHandle

Sections

.text
Size: 378KB - Virtual size: 377KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 818B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ