8453c0f67d89c5e9a31e85f327abe459_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8453c0f67d89c5e9a31e85f327abe459_JaffaCakes118
Size

47KB
MD5

8453c0f67d89c5e9a31e85f327abe459
SHA1

09fe42f96c73e3693ea62b84c64fe1fc6a4cc21b
SHA256

4a3c92368121ccd9d03740003960f594699bded71c3a46eab97f16d6e209c054
SHA512

0a3366d596dde34f4acd6a4a03fde01dbb9f989c8d7a7c636f2943df5580f9de199efbdcf63c167ef8400f8ae5d3407fbe9e0e577f57ef47783d86c6aa9799ec
SSDEEP

768:XVvw+99db47oqNFKm8Q4QznlP5l1jCVNDzw19Mfo0GFHXCpiTteZxUrlqFmNXkYX:lvw+Vs7oqNFKm8Q4QLlP5lMVa10LGFy0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8453c0f67d89c5e9a31e85f327abe459_JaffaCakes118

Files

8453c0f67d89c5e9a31e85f327abe459_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f3f0e15de0d001b77c9a98e9bbae1187

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
Sleep
HeapDestroy
QueryPerformanceCounter
HeapFree
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE