82e9ad5e94c66dd4b60371b595514080_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

82e9ad5e94c66dd4b60371b595514080_JaffaCakes118
Size

194KB
MD5

82e9ad5e94c66dd4b60371b595514080
SHA1

3446ab183e7911404c2e890eaa837cd1950beeb0
SHA256

958e374dcfcf9656cccfccb0a7e340e9c3212be32ad1562d6ec50df0ddf5e080
SHA512

c52920a5b3108746066d12bbb352b93f8d6fab7554a1620a8003d2f49fc229ca4071a48706715b49cee55af2382e9452b9c9949b44a3243fd0b317d28bb2155d
SSDEEP

3072:sBiuRQ2S1haWJSZVl7wfWmNgt6m7n9427tlYUHoJpWaD7qqCYqOY8ZWUSQbZdsS5:sYJL1h4e+3Yk3lIJpHqFYBzZl9dsHMr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82e9ad5e94c66dd4b60371b595514080_JaffaCakes118

Files

82e9ad5e94c66dd4b60371b595514080_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ca6b104e673b075a0814e096818453f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
memcpy
strlen

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
FreeLibrary
VirtualFree
HeapFree
HeapAlloc
HeapReAlloc

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 180KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE