78735c986209a7133b2a064e8bb9cb3c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78735c986209a7133b2a064e8bb9cb3c_JaffaCakes118
Size

1.9MB
MD5

78735c986209a7133b2a064e8bb9cb3c
SHA1

264ea1628ac72fa6afadda09ffc729db933df506
SHA256

6f267596aefb5501518c7f31aa523da3bfc1ca41e4f48ef6c4857f6a9acf805c
SHA512

08e920ec813f0236038e0b30e3a617113022b9586a3d24596b49275f2246e1413b21e6b293908e6785c56698169867649418bfb4de2b7f5e60c7702b5d9e376c
SSDEEP

49152:HTH7LpXnzjWxm04RVJnC5smPukqZ0FO/1q:Hz7J/E4j0WmV8P1q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78735c986209a7133b2a064e8bb9cb3c_JaffaCakes118

Files

78735c986209a7133b2a064e8bb9cb3c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

33230cf2a8b23d270c3cc8f0a849dfa8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetModuleHandleW
GetUserDefaultLCID
GetSystemDefaultLangID
GetUserDefaultLangID
GetModuleHandleA
GetLastError
GetCommandLineA
GetTickCount
GetSystemDefaultLCID
GetCurrentProcess
HeapAlloc
GetProcessHeap
lstrlenW
GetStringTypeW
GetEnvironmentStringsW
FreeEnvironmentStringsW
CloseHandle
MultiByteToWideChar
GetStartupInfoA
SetUnhandledExceptionFilter
VirtualFree
TlsSetValue
GetFileSize
LCMapStringW
TerminateProcess
CompareStringW
SetStdHandle

Sections

.text
Size: 378KB - Virtual size: 377KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 818B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ