713cd180bead034977fe6718c0474b97_JaffaCakes118 | Triage

Sharing

General

Target

713cd180bead034977fe6718c0474b97_JaffaCakes118
Size

31KB
MD5

713cd180bead034977fe6718c0474b97
SHA1

6c684a17eafd492878c7fced9fe35571905dc2f1
SHA256

6d77914a054b7d6c7c58e5dc2b401ddbd4417791e0910fa2b0379de1e9e2eead
SHA512

7790df4a45509e9bc8db99d7dc9c49f5aad54c198c1d4a583f57d76d7b1e15bbe0069cd64362e3797802aec5cbdb9d2a1fca792864bbb62acae8869ae1de19bb
SSDEEP

768:Aw3dbpv0DYdHKRCGu94WW2f6Lk9B4yaW8ikOyo+PF1rYK:VNv0DPC94WWUUk9Bl3CPFJB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
713cd180bead034977fe6718c0474b97_JaffaCakes118

Files

713cd180bead034977fe6718c0474b97_JaffaCakes118
.exe windows:4 windows x86 arch:x86

260e66e86c5e3217f9faf2fa097b1d5a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
QueryPerformanceCounter
HeapFree
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
Sleep
ReadFile
SetFilePointer
CreateFileA
GetTickCount
ExitProcess
GetModuleFileNameA
VirtualAlloc
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 710B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE