841d0659c270d8549dd35a87d2b52d5d_JaffaCakes118 | Triage

Sharing

General

Target

841d0659c270d8549dd35a87d2b52d5d_JaffaCakes118
Size

44KB
MD5

841d0659c270d8549dd35a87d2b52d5d
SHA1

7ad30ee9ae3e74af619992e53d80182e23bf80bb
SHA256

f4ac67c1b4883ac491ddfd02a8c9e73bad6a9fc401b076289e5dab2538e28043
SHA512

72754f104b1211baa54c4a696d1f26369f7b0ab3faf87c1860eef37db54c56ae48b50cde991754c50c17124f1a0efe0914e9f6b7620c50e7448707e5232e8f84
SSDEEP

768:HyS1tQZzDP+GiB9eZ3lm5xolr1KFAyGEjexT:HyS1OdF3jlr1KFHGEid

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
841d0659c270d8549dd35a87d2b52d5d_JaffaCakes118

Files

841d0659c270d8549dd35a87d2b52d5d_JaffaCakes118
.exe .js windows:4 windows x86 arch:x86 polyglot

cc9f430d79e911b1c8eb29b5153e8d54

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetProcAddress
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
RtlUnwind
WriteFile
HeapAlloc
HeapReAlloc
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE