72c90c88a5d011442ea77c1ecd488a9a_JaffaCakes118 | Triage

Sharing

General

Target

72c90c88a5d011442ea77c1ecd488a9a_JaffaCakes118
Size

65KB
MD5

72c90c88a5d011442ea77c1ecd488a9a
SHA1

289569ae60c343a0016c9983e88d001fed09eec3
SHA256

daa36ddf6ec8f15bfad7ef2dc16f2713c3bffbf54361da406b188d792a5750bc
SHA512

8f08fe9ce91022b74b661d9a4f76bc15e496a930dd433b5fece30ccfe09fa187f050b4211fafa4c191b6f651b6ce38d2631166f9ada51cb77667d1021fd8c9fc
SSDEEP

1536:cNjDUErN3IlISQenaPqhjhioZfqofry7IzjbLrFbUj6zdkY9dlIElqH957CKOR:cNjDUErN3IlISQenaP6VqojnbRbUST9P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72c90c88a5d011442ea77c1ecd488a9a_JaffaCakes118

Files

72c90c88a5d011442ea77c1ecd488a9a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

98e289c0ecc76f508187093510a5a8c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
QueryPerformanceCounter
HeapCreate
Sleep
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE