abea0a1931721a15ea2f19fe02f4a259_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

abea0a1931721a15ea2f19fe02f4a259_JaffaCakes118
Size

328KB
MD5

abea0a1931721a15ea2f19fe02f4a259
SHA1

389d90c555642345394b26ba647b5f5f35441417
SHA256

cff4ab2ee7421bd8960afc5b92e72e454d7dfb41b9e3386d47a548c0e516595b
SHA512

11da7a36982f0b8a51ec99225a14139917e7ea06f087bcd8380cb0856f6a7175b87e18420631f3c00ee1115320e25e0b1e2b95c9ed8d89ff843ec49dbb241b82
SSDEEP

6144:644JorJd7NwLQGxNRMrIM1P1lB352LNhxxf2RVb:6PorBSQGlc71NzJOYRZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abea0a1931721a15ea2f19fe02f4a259_JaffaCakes118

Files

abea0a1931721a15ea2f19fe02f4a259_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d6eb7d8a422b89ebdd04d87f28ceb049

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapSize
FreeLibrary
InterlockedIncrement
GetModuleFileNameA
FormatMessageA
GetTickCount
IsDebuggerPresent
LCMapStringA
GetOEMCP
GlobalFree
LocalFree
LoadResource
LocalAlloc
SetUnhandledExceptionFilter
EnterCriticalSection
GetFileType
DeleteCriticalSection
VirtualFree
ExitProcess
VirtualAlloc
lstrlenA
GetStartupInfoA
GetModuleHandleA

msvcrt

exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_exit
_strcmpi

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 320KB - Virtual size: 319KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE