70eca73135cd48e8361ea277b4868010_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70eca73135cd48e8361ea277b4868010_JaffaCakes118
Size

286KB
MD5

70eca73135cd48e8361ea277b4868010
SHA1

bb92d7e834ea7cf53becf84228b02f4ef192d431
SHA256

8d097773af78cbf3c90181ba091390ef925bf183b98c945746173979a3d0e5c8
SHA512

7a63a616d2e285af3594b938ad50af6268350964b0bf1a4ea50507a3a2d24133285601ef9d8341fdc11b4732018a7b03dba62e4d19b107a6cc9ce53908110fde
SSDEEP

6144:rUuNvwgP6pv4OlC3Hk+P+L+KwEaMymFZDgGg5H0+gJWp:YM4gylmHb+LxxXg9H0HG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70eca73135cd48e8361ea277b4868010_JaffaCakes118

Files

70eca73135cd48e8361ea277b4868010_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1052b239a7a4f9bf6b294105faf303cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSection
SetStdHandle
LoadLibraryA
GlobalGetAtomNameA
FreeLibrary
WriteConsoleA
GetSystemTimeAsFileTime
GetCurrentProcessId
IsValidCodePage
SetFilePointer
GetCurrentProcess
IsDebuggerPresent
VirtualAlloc
GetDateFormatA
GetTimeFormatA
GetOEMCP
EnumResourceNamesW
GetACP
TerminateProcess
UnhandledExceptionFilter
MultiByteToWideChar
SetUnhandledExceptionFilter
GetStringTypeA
HeapSize
InitializeCriticalSection
WriteFile
HeapReAlloc
GetLocaleInfoA
RtlUnwind
EnterCriticalSection
GetConsoleOutputCP
GetCPInfo
RaiseException

rpcrt4

RpcStringFreeA

shlwapi

SHCreateStreamOnFileW
SHCreateStreamOnFileEx
PathAppendA
PathIsContentTypeA
PathIsFileSpecA
PathCreateFromUrlW

Sections

.text
Size: 141KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 142KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ