b1aff3b0e134e3e59de49b43f50affb4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1aff3b0e134e3e59de49b43f50affb4_JaffaCakes118
Size

31KB
MD5

b1aff3b0e134e3e59de49b43f50affb4
SHA1

fd2c772e531cb3cf94b1fd1b0658b3b5838f8216
SHA256

52b8fe2216e0ddb33a04bad09411cd4b9027cce27d9cf25572e697437fe772b0
SHA512

82453bdf078c6bff214345d61b550d5ba12db2bdf7d997d3be359ced5cf76376939cee322fa48bc762a2316ff9cd9575dbe0d9d9183ae5c5451d2ed4b6cba207
SSDEEP

768:b+dbWvLKduu/9x+ikrrlM2GtdY6vr6iLR4:YKvLQ/9wrlM2OfC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1aff3b0e134e3e59de49b43f50affb4_JaffaCakes118

Files

b1aff3b0e134e3e59de49b43f50affb4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2f919f6240ea19b2608d669c29bc0c68

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
QueryPerformanceCounter
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
Sleep
GetTickCount
ReadFile
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
VirtualAlloc
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 710B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE