85b8968195ada976eabf72ace87df078_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85b8968195ada976eabf72ace87df078_JaffaCakes118
Size

109KB
MD5

85b8968195ada976eabf72ace87df078
SHA1

4ed218f6585016afc998345343b644b85d77c8ae
SHA256

5a92fa685ac148ff71bc2d79b59b3cfd72b5e9db88dc75780c86806dd5daeb8b
SHA512

b2a5d900e1472eb112bc2eb6f6527c5e612442a4e2d40e3bf60feaec38c11eb287394cab383ff9f567d1c4db02b9925cbb685a8548a890a0b996183dc328b492
SSDEEP

3072:EpLwyDfulTE32lmoy9QSpUJh7LII1VjlXCdUBmfSdPws1zUK:QS1VjlYGmfOD1wK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85b8968195ada976eabf72ace87df078_JaffaCakes118

Files

85b8968195ada976eabf72ace87df078_JaffaCakes118
.exe windows:4 windows x86 arch:x86

84a63aea3ee01401c9dacf3a46f569a1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
QueryPerformanceCounter
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
Sleep
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
GetStartupInfoA
GetModuleHandleA
HeapReAlloc
GetCommandLineA

user32

wvsprintfA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE