770cab81d5be1785f3f747a1a2fabb63_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

770cab81d5be1785f3f747a1a2fabb63_JaffaCakes118
Size

54KB
MD5

770cab81d5be1785f3f747a1a2fabb63
SHA1

54fb211fad62306c66bad57b6b13951b30996a6c
SHA256

f603d351282ce7e85be6a1978d56ff6651c29559fe49d6d3b1b78cd42286a6e1
SHA512

418fc4857c0e72337e027b96656262f228bad68b4df5c99f7f1c00acb2884ce72c1f981d444a8ecc48217db8120d8f2ad7d9c3e794c766121881fd756ee94d9b
SSDEEP

1536:zSWVDb0P7Z1zi+KJuaBBV16V2fXBnoyFNvziZDZqAWT5:zSWVDb0P7Z1zipJuaBZOOoyFNvzihDWV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
770cab81d5be1785f3f747a1a2fabb63_JaffaCakes118

Files

770cab81d5be1785f3f747a1a2fabb63_JaffaCakes118
.exe windows:4 windows x86 arch:x86

28e4272bd3ca6e9c18114fe4ed9facac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
Sleep
CreateFileA
QueryPerformanceCounter
ExitProcess
GetModuleFileNameA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE