7802987f90b8e8514674c8fab6ca1598_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7802987f90b8e8514674c8fab6ca1598_JaffaCakes118
Size

100KB
MD5

7802987f90b8e8514674c8fab6ca1598
SHA1

38b4820019a91d83ee132e2ddf0be47ecf1f7c65
SHA256

670b48ce71c8caf379442066ef872113f823ff695fed7c8ae3a28d8e3d772a71
SHA512

425c9a9f7f43981b90b136070766abb72526147a2e4f2fd9ea08204519f56d77be1441f690bb11832e5d276378a6d451692f9fd9540a95bfab63cae071c28c90
SSDEEP

3072:EpLwyDfulTE32lmoy9QSpUJh7LII1VjlXCG/ZdkRXFO83AO5ZCakoTKuql75wAaa:QS1VjlNze3Fjkok1dNx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7802987f90b8e8514674c8fab6ca1598_JaffaCakes118

Files

7802987f90b8e8514674c8fab6ca1598_JaffaCakes118
.exe windows:4 windows x86 arch:x86

84a63aea3ee01401c9dacf3a46f569a1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
QueryPerformanceCounter
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
Sleep
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
GetStartupInfoA
GetModuleHandleA
HeapReAlloc
GetCommandLineA

user32

wvsprintfA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE