712b74bc5b5d5251dc5e094d92a17238_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

712b74bc5b5d5251dc5e094d92a17238_JaffaCakes118
Size

266KB
MD5

712b74bc5b5d5251dc5e094d92a17238
SHA1

2923534ec53f4f93f367151210f9d29bdf1da0c2
SHA256

58c798c408ea63d6f8e21627b88e14e51595dba79055d81ae37b0c0d6fc77cce
SHA512

6d032e752684d4ef19414a3a8bfc5c50a8e3c1c05e6b84c2d2a10ac790c08d24e511d0683ddb1c88ad6b6353c3caa0b2dffeb0e0e89ba5286ba69f64007f3c87
SSDEEP

6144:r3T1S5ZlB8HoMF4gA8ry/UhogNYCwKI/q885Kaefim/AADNCXGQ:rj1YjgbOKuVyNR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
712b74bc5b5d5251dc5e094d92a17238_JaffaCakes118

Files

712b74bc5b5d5251dc5e094d92a17238_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8c8cd2fe8f466202b9cc82f6156dad3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
Sleep
ReadFile
SetFilePointer
CreateFileA
QueryPerformanceCounter
ExitProcess
GetModuleFileNameA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
GetStartupInfoA
GetModuleHandleA
HeapReAlloc
GetCommandLineA

user32

wvsprintfA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE