a8521f7c820eee8398fe9ce2551e83ca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a8521f7c820eee8398fe9ce2551e83ca_JaffaCakes118
Size

38KB
MD5

a8521f7c820eee8398fe9ce2551e83ca
SHA1

47c08cafd0691455998d92a34606d2c2395c8d35
SHA256

56a89624dcaf9e1f7aff9d13c4179683fef33c85e7c89db8cdd1014f80855da5
SHA512

feb8579dd9b2dd959ce1addea95787b47163ac4e5e9cbf0f592791bfcbd4bf01d14e1eb10c931d6064906aec2b480774f7c3dc8cd32b4a1e09ffc59d1c985d9a
SSDEEP

768:Xvvov6h8+dbSOjq4HZ+wLf7mYJJXdNdpAuVr33BqYWo8P9UREMB2ja01md:/AChDeOjJHZ+wLf7VJJXdN7QYWqSMYa/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8521f7c820eee8398fe9ce2551e83ca_JaffaCakes118

Files

a8521f7c820eee8398fe9ce2551e83ca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2d9e4dfb9660ece27ef87af7dde2648e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
QueryPerformanceCounter
HeapDestroy
Sleep
HeapFree
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE