848b0ba01ebb24871118080a6e2c02a1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

848b0ba01ebb24871118080a6e2c02a1_JaffaCakes118
Size

68KB
MD5

848b0ba01ebb24871118080a6e2c02a1
SHA1

242d4490614f42366e2362f2a3d91f45b67041d9
SHA256

0a8988b709d676d8b728a2d12084b38bd4c0187ff1fb7c8bddbefadfcf7bc945
SHA512

01d0bdc0b9633954077b933c3c6a922fb02f32df8cca6852f3b742c8e01455486fd765066daa6e6171b8a9eff3eb9d71af9c09e7f4aae974e1b48c9b9046723f
SSDEEP

768:llrwIOTV4bmeeIyF6ookEnjqlpCk5oyv:lKebbeCoLSjqlpnWyv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
848b0ba01ebb24871118080a6e2c02a1_JaffaCakes118

Files

848b0ba01ebb24871118080a6e2c02a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ec30de5aa8cdc127eef09bcc88c4d793

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetStringTypeA
LCMapStringW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
GetStringTypeW

shell32

ShellExecuteA

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ