876a655714786ffbf7d5458c36ce53d7_JaffaCakes118 | Triage

Sharing

General

Target

876a655714786ffbf7d5458c36ce53d7_JaffaCakes118
Size

128KB
MD5

876a655714786ffbf7d5458c36ce53d7
SHA1

a4f41e7ebf44a4d785bcebf60aa8c893f04d921e
SHA256

0746713575eb5437f593a10a3ed9efb17d4f1e0a8aa507f7fc7d75becd54766b
SHA512

61b98cc099be4a8938920965f2b3f83157ea14e6c1395c9127d2129f1ba2d0cb4907e4374388b4b72c1c023d54600d56f9c9cafaab45485984049f99b182a061
SSDEEP

3072:VeLNUjGXzojTtWC86tTBfK1tj/1xNzm7xZ+e:SUkzyTs6tTBG/1vz6v+e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
876a655714786ffbf7d5458c36ce53d7_JaffaCakes118

Files

876a655714786ffbf7d5458c36ce53d7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d88a54852c6089a16f3c2cc37cf583e1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ