a9fc0e5c584150524b1b1a2af8ead53f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a9fc0e5c584150524b1b1a2af8ead53f_JaffaCakes118
Size

108KB
MD5

a9fc0e5c584150524b1b1a2af8ead53f
SHA1

ce9142cb3dfeac09b0b0bf51e8c1bcc58eb93c5c
SHA256

0ebc9b581305940c064fb13ff500d5d3433349b3aa39468379ff0475edf4ddf2
SHA512

71e4d1ba0a74b96169646f070021fc8d5d63a13d6fc1f247828650a63dbd600fba0e8047295aa565a2874b5075ee46780406c0109e4778724f9c652acf32c3df
SSDEEP

3072:CSGovCeoWcy3jFC/y6hkyUNwVxw65SY0HpUP:CoCeoWL3hiANC5SY0HpUP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9fc0e5c584150524b1b1a2af8ead53f_JaffaCakes118

Files

a9fc0e5c584150524b1b1a2af8ead53f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

459fe0261286ef00e1d8ced67d826714

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
GetLastError
FlushFileBuffers
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
CloseHandle

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ