9638cdcc640cb71ca61130f55118b7f6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9638cdcc640cb71ca61130f55118b7f6_JaffaCakes118
Size

76KB
MD5

9638cdcc640cb71ca61130f55118b7f6
SHA1

302d6efd2a36cabb91dfc99f14fdc5c39e05f406
SHA256

75c2b32f6df46d7da322a4a17454a0250842fd86291edd82d439dbde71afcef5
SHA512

3ae1c0037ba16ec3f177805d337138051afc1f88ba8338baab328a37bbff9c0496a6bcb24760325a52bd2591344b2c4b2f0e2b6023ec7c33c70096c59b832c85
SSDEEP

1536:EmbW2CbLhoEVT72KU4FAMqwkknc2qNvUmhlMlo:jbW2MoACwkUqNvQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9638cdcc640cb71ca61130f55118b7f6_JaffaCakes118

Files

9638cdcc640cb71ca61130f55118b7f6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5adfd49023318acee4f30db9f9c0339d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetModuleFileNameA
Process32First
WriteFile
CreateFileA
CloseHandle
CreateToolhelp32Snapshot
Process32Next
RtlUnwind
ExitProcess
TerminateProcess
GetCurrentProcess
GetStartupInfoA
GetCommandLineA
GetVersion
HeapReAlloc
HeapAlloc
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

advapi32

GetUserNameA

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE