b5684a01fa90d60c9a51a1720baa5170_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5684a01fa90d60c9a51a1720baa5170_JaffaCakes118
Size

72KB
MD5

b5684a01fa90d60c9a51a1720baa5170
SHA1

1a9ca8066a8fd2ed53126da0587fc086f7a07a83
SHA256

f4b513dc30cbba88635d11d2399991133b6b12c523ff3dc8380b96d04c121367
SHA512

734efbf05f158d36c8ce2a04a6cc2b54f26d9b72c56fedfc71160c0dfcb42a94953359efcf5dcc3d190caec7f3d44752e968eed3e06f1930b0f77eb4d80c2aee
SSDEEP

1536:T/tc87HoUVT72KU4FAMqwkknc2qNv4mhlMlo:T/tjowCwkUqNvs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5684a01fa90d60c9a51a1720baa5170_JaffaCakes118

Files

b5684a01fa90d60c9a51a1720baa5170_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0a1298f56bdf07f51ca891d3725bbef9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
CloseHandle
WriteFile
CreateFileA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapReAlloc
HeapAlloc
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE