89107bc50edb925c34a5ecd77c1d28b0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89107bc50edb925c34a5ecd77c1d28b0_JaffaCakes118
Size

36KB
MD5

89107bc50edb925c34a5ecd77c1d28b0
SHA1

ff270bc8b7fc0a79d301b7c15a3d72e86803b513
SHA256

2ee398e1ba2eaefeeffc50ee26d284802fe620029094f7ef9d50591c7c7e581a
SHA512

d74de316c9b35d0c5a56b0ee385d397003f0bbf73bd06ee3a2bdddfe628d15784f5fb2476d53d9cd6b695fefb9535b948b6bccf573a2736c20026feb5c2b0c0d
SSDEEP

384:0zupvEeoRjQI23CdbKeBNzTW7C91mKdyUlXz84tv:0svEztl4EN5MKdhlj84tv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89107bc50edb925c34a5ecd77c1d28b0_JaffaCakes118

Files

89107bc50edb925c34a5ecd77c1d28b0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a6dda644aec921baa6b11777d5b9435c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
Sleep
WinExec
GetVersionExA
GetStringTypeA
LCMapStringW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
GetStringTypeW

user32

wsprintfA

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE