787a191b54ce419172ca4655f2293482_JaffaCakes118 | Triage

Sharing

General

Target

787a191b54ce419172ca4655f2293482_JaffaCakes118
Size

40KB
MD5

787a191b54ce419172ca4655f2293482
SHA1

d0fe932d43e075786db4350f40994e8365a99b2c
SHA256

1d317be3c465f37f4d90e7fe76b21792ad52edf3a3fbf931457791f7236b5138
SHA512

6c2cb49979e0a7cdf8be8e728fcfb0990b97d1a75fe390c6c1d0465ba5216425fb3ff8028faa7e43b7a2be3871fa1a0d8b9c1392aad424f5fd6d0a55d2d4d20d
SSDEEP

384:ask+P9FMug7iBESHQ+yyo9JxTVtN7aaTPKt/CsWAAPpBTm/sZW0lx1ivTro:a30Qp+2Sw+0Z75T6auAnTjQ0lPivTr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
787a191b54ce419172ca4655f2293482_JaffaCakes118

Files

787a191b54ce419172ca4655f2293482_JaffaCakes118
.exe windows:4 windows x86 arch:x86

336f752684c738f5071ba5e1d0de5cef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
Sleep
CreateProcessA
GetStartupInfoA
ExitProcess
GetLastError
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
GetModuleHandleA
GetCommandLineA
GetVersion
SetHandleCount
GetStdHandle
GetFileType
HeapAlloc
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
VirtualAlloc
HeapReAlloc
FlushFileBuffers
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE