970f6647483f692b09844162a75d2b4e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

970f6647483f692b09844162a75d2b4e_JaffaCakes118
Size

39KB
MD5

970f6647483f692b09844162a75d2b4e
SHA1

7db3f1f2ef55cb998d39279936cefbdd60cf4711
SHA256

c76e4f0a05b416323c7ce116b34ffee1a81d81caee5424620ac2bac29d1c26df
SHA512

76a527a3c0058da3b9f55e226759f741611ff0ade59efe010fd1a2392945037ac9753fcd9c60cdfef049eabe50a4291af8ead5fc503f74b65283a0458ddf64cd
SSDEEP

768:WZSEyCvCIIKxWidm1EsS8C8mWfcxRGM0YnKwycCh6oq:Wg2NoiI1E5rRahYnK3Coq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
970f6647483f692b09844162a75d2b4e_JaffaCakes118

Files

970f6647483f692b09844162a75d2b4e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

812c27df5aa353fe5098542519bb9907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 155KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ