729a1c0ff2a964c5ae897de1cb2c495e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

729a1c0ff2a964c5ae897de1cb2c495e_JaffaCakes118
Size

102KB
MD5

729a1c0ff2a964c5ae897de1cb2c495e
SHA1

c89e809a24f7b8935b8d49e03b73e10fe9f994c0
SHA256

3b4d306878b08bf136b63781401f838e90a8b248f3adbc3a6737534a6ba5e12a
SHA512

f8c3a7b319f924768e15d0d9edd77c5580b6fd6f1d014eef6cb7271e087eb3cc69b055d0c2583176a9c8229f7abb9d35d36e10c7b40f8d1aeec461786830cee2
SSDEEP

3072:lsN53oL3bmEzZRuwDhGWiaA4luqWt5ACmp:E2yWu0GWbYQF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
729a1c0ff2a964c5ae897de1cb2c495e_JaffaCakes118

Files

729a1c0ff2a964c5ae897de1cb2c495e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

803aa9ae1c8f91e14393d92c8f703a66

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
FreeLibrary
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
IsBadWritePtr
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.extra
Size: 1KB - Virtual size: 42KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ