82d13ab955b319c024add9ad4eaf5f72_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

82d13ab955b319c024add9ad4eaf5f72_JaffaCakes118
Size

66KB
MD5

82d13ab955b319c024add9ad4eaf5f72
SHA1

b184d01c527c9f48ea1bdb2d2f3663be5ec56891
SHA256

384b9738b6eb1ba670d6a67305b11bc1289b8eeb710d3f1db6d5a111dfe4c4f5
SHA512

7c22c5da38eb8d5573c25ccebbee1ce945f484aeba0092d3bacf5c8eadf1629b583dd31159a9bd1b10c18e811e7d8b28c58dd7886f57da204a1c13340bd043e6
SSDEEP

768:ccccccckccccccccccccccccccccccccccccccxccccccccccccccccccccccccI:ojscMPE1FgWq/RmR8xiUYlz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82d13ab955b319c024add9ad4eaf5f72_JaffaCakes118

Files

82d13ab955b319c024add9ad4eaf5f72_JaffaCakes118
.exe windows:5 windows x86 arch:x86

11a8fd4e7d158a2e8273c18240ec3ad6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
HeapAlloc
GetProcessHeap
CreateFileA
GetModuleFileNameA
ReadFile
GetModuleHandleA
OpenProcess
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 824B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 342B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ