7549e268aaf75bfd2697137af2d941f5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7549e268aaf75bfd2697137af2d941f5_JaffaCakes118
Size

1.9MB
MD5

7549e268aaf75bfd2697137af2d941f5
SHA1

5c07cfb7a1d2baf56ea4844afb4d11eeab279492
SHA256

036c650f1d751b54fb066f54fcd9ba797bb6506721155f70b95bd528a7160525
SHA512

de52a4130564c0e23d21db2b4844de64bc705ce742021492afd05a28a80e0da46f7b97f1dc1ff8a6ad66126fa740f96c413878290070347939f24a00d94cb022
SSDEEP

49152:HTH7LpXnzjWxm04RVJnC5smPukqZ0FO/19:Hz7J/E4j0WmV8P19

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7549e268aaf75bfd2697137af2d941f5_JaffaCakes118

Files

7549e268aaf75bfd2697137af2d941f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

33230cf2a8b23d270c3cc8f0a849dfa8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetModuleHandleW
GetUserDefaultLCID
GetSystemDefaultLangID
GetUserDefaultLangID
GetModuleHandleA
GetLastError
GetCommandLineA
GetTickCount
GetSystemDefaultLCID
GetCurrentProcess
HeapAlloc
GetProcessHeap
lstrlenW
GetStringTypeW
GetEnvironmentStringsW
FreeEnvironmentStringsW
CloseHandle
MultiByteToWideChar
GetStartupInfoA
SetUnhandledExceptionFilter
VirtualFree
TlsSetValue
GetFileSize
LCMapStringW
TerminateProcess
CompareStringW
SetStdHandle

Sections

.text
Size: 378KB - Virtual size: 377KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 818B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ