84d2090b58e147d55a180c8cd26652d7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

84d2090b58e147d55a180c8cd26652d7_JaffaCakes118
Size

61KB
MD5

84d2090b58e147d55a180c8cd26652d7
SHA1

63a8aa4d521a6d5880b92a2bed28fedbdd988cdc
SHA256

39b45ad07778ebd2ac616180c7f38e76afba57ca7fed3d6e800fb28a7dff309f
SHA512

215a2d63d9b4e8daaca04c4ebe7be6dbd961054f56e0b18f161df78a5ce3890ca999ba01fff1922d039f0bbe67486c3710e6baa37665270419e406e24bf886f1
SSDEEP

768:ShWOwna0h+ulFDJnJ6UdXct04A1Rp80l9Lz6y2iUZGVRZ3l2zkv3zwQkxkqJ+Jqc:SMNDl+0rVV6y2hE/0Qk1qqkEAt2a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84d2090b58e147d55a180c8cd26652d7_JaffaCakes118

Files

84d2090b58e147d55a180c8cd26652d7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cfa927e4ddd32b960b276cab1c4fcc88

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
ExitProcess
GetSystemTimeAsFileTime
GetStartupInfoA
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetConsoleCtrlHandler
GetConsoleMode
GetConsoleOutputCP
WriteFile
GetLastError
MultiByteToWideChar
ReadFile
GetConsoleCP
VirtualAlloc
VirtualQuery
CloseHandle
SetFilePointer
SetStdHandle
WideCharToMultiByte
DeleteFileA

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE