76d760781fa0953364b1b4e115843836_JaffaCakes118 | Triage

Sharing

General

Target

76d760781fa0953364b1b4e115843836_JaffaCakes118
Size

48KB
MD5

76d760781fa0953364b1b4e115843836
SHA1

7cade88697b82e5a807882d90bb1d497be00812d
SHA256

90da53af0baac6c28ed263806c277b185ce5b3c5b0582cf171c384cae76e7d22
SHA512

588534e4b67497edd3789aa5c969793b8adc3f0c4250f8ceb805162dfe8ecf4f016bb65699444613a814470a0ebf6aa557115c938649de26902c424f68583b64
SSDEEP

768:W6kQDItmWgFBDUN2pHIkDCfdqAsrO9X8:I0WgFtlIndqAsrYs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76d760781fa0953364b1b4e115843836_JaffaCakes118

Files

76d760781fa0953364b1b4e115843836_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b995230d5284a923427a27c96b241238

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetLastError
WriteFile
SetFilePointer
ReadFile
CreateFileA
Sleep
LCMapStringW
LCMapStringA
SetStdHandle
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
FlushFileBuffers

user32

MessageBoxA
GetActiveWindow

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE