a1ea74a5e7c24c5a40b9a3065d5a59f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1ea74a5e7c24c5a40b9a3065d5a59f9_JaffaCakes118
Size

74KB
MD5

a1ea74a5e7c24c5a40b9a3065d5a59f9
SHA1

8aef2129ad06c211e1db31c21a5a0b22ba7da887
SHA256

2ed2d7310e935044dc1739ceb7682f7c27c27a87a7bdc67b41f3914048e713c6
SHA512

d207f9980988d28527ae8a40bf796edb17bd2daf41bcd8f3db9b8749cc7cf495ca28f0b440671fc60a18f519a0deead6bdbb47ab646b9f2f0ef666e2d8b4fb2c
SSDEEP

1536:2pfDlT9VTMVpI+CqV1jDWTFTjkZPdE85I0tFApHYI7D+VyHEaRt:2zT7X+C2MTau06Hl7tpt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1ea74a5e7c24c5a40b9a3065d5a59f9_JaffaCakes118

Files

a1ea74a5e7c24c5a40b9a3065d5a59f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

42abb7cab46da6a846ffbee29fecd3ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE