a4107efc12fa267d684b54e2098e1ecd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4107efc12fa267d684b54e2098e1ecd_JaffaCakes118
Size

260KB
MD5

a4107efc12fa267d684b54e2098e1ecd
SHA1

e41887f14e292c6987108002ef14059d5d1c56be
SHA256

c6cb1cafbd46857cffeec91b3b773c50330b8d2f91c614f95e3864dab619f85e
SHA512

bbce8e68ad6bb664b8d3189c7ccc9cbce6dac710f20d594471f12cf7e539f7734597197b76003bbe8aa94432c17f19074ad618e151e1285010ec924ac982389a
SSDEEP

6144:kUkzyTs6tTBRsTPazgPVnVcmYS7w8m1K:kRF6tTAPigFV5Pw8P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4107efc12fa267d684b54e2098e1ecd_JaffaCakes118

Files

a4107efc12fa267d684b54e2098e1ecd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d88a54852c6089a16f3c2cc37cf583e1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ