ad20d35b54280258f1aceeacff8d2c59_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad20d35b54280258f1aceeacff8d2c59_JaffaCakes118
Size

379KB
MD5

ad20d35b54280258f1aceeacff8d2c59
SHA1

bd63551556f87ac023d52a69035488d16ec72129
SHA256

62e7467cf380afcad60220d5a81b0869761c24854d9b96f691fc5b29a9b2ed03
SHA512

8465637b5179337e4171f340358e32d37747073e9420e5dcf5a6eb83d3b210ebc9aa29c9338e22a55a6e99f1f24b241659718074466f8e467f348df6d26d132d
SSDEEP

6144:PnD5zF+TucD4l0je/eAbPR3COuPzxiBdczOmm1sB75/ltll9kMtcXII2Ip:PX+ScDc0C9Wbx+dcymmuJ9Lle7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad20d35b54280258f1aceeacff8d2c59_JaffaCakes118

Files

ad20d35b54280258f1aceeacff8d2c59_JaffaCakes118
.exe windows:4 windows x86 arch:x86

06dce73856ab34008f34a5ead8a7cfd3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleHandleA
GetWindowsDirectoryA
GetSystemTimeAsFileTime
GetStartupInfoA
ExitProcess
VirtualAlloc
VirtualQuery
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
RtlUnwind
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetConsoleCtrlHandler

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ