a11e6f2cde0fd77c898e0ef0370c0b3b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a11e6f2cde0fd77c898e0ef0370c0b3b_JaffaCakes118
Size

47KB
MD5

a11e6f2cde0fd77c898e0ef0370c0b3b
SHA1

280a8605942502323caa8c66e0be9d24132a7ca7
SHA256

2646edfc24b178671fc489bb3b7c5792b9581450087b64656a3ad181546e7e84
SHA512

b65710f640f29cae4c476a4bf811c79b3722703c93175f85ad670c34c7a471b8d87af9fdab191b3d06361e26ee49c6f5c456ea33989e7a603501e56d69b2e92d
SSDEEP

768:PgMf43k+qpxDgL04Nz86Q00+DNl+mNdXYP1bu+rCAkMX2yxhLKAkvycTbQZ7r:PguxMLZ0NQjgNbZNkMjEFTsZ7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a11e6f2cde0fd77c898e0ef0370c0b3b_JaffaCakes118

Files

a11e6f2cde0fd77c898e0ef0370c0b3b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7c2bc85599e9567a0508d3a84089c116

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
CloseHandle
CreateFileA
lstrcatA
GetWindowsDirectoryA
GetModuleHandleA
GetStartupInfoA
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
HeapSetInformation
FindClose
FindFirstFileW
lstrcmpW
FoldStringW
GetCurrentProcessId
GetCommandLineW
MulDiv
GetFullPathNameW
LocalSize
GetLastError
WriteFile
SetLastError
WideCharToMultiByte
SetEndOfFile
LocalReAlloc
GetFileInformationByHandle
HeapAlloc
HeapFree
GetTimeFormatW

Sections

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 574B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ