b447c710f3ba2e47f8804de664166ece_JaffaCakes118 | Triage

Sharing

General

Target

b447c710f3ba2e47f8804de664166ece_JaffaCakes118
Size

34KB
MD5

b447c710f3ba2e47f8804de664166ece
SHA1

6bcc8369ccc61764f6bc888b79d8007cc0d27cd3
SHA256

15d5aded98ccf93a8a98776e6d1adf97bf56c473a3f791219f6775cb56d3d8d6
SHA512

92e42ed923393b0c4ed78cfef217d39e23b8204c99f5c5d2a9145972688074f33f10c3b74783e13ed93da22c7a96dc0346e0c9a657e11f7830c0e717f4242024
SSDEEP

768:P8sKrX9RpbE+yBaHOZsUK3GYamefP80uStWOJJ7Sge8Ndg6vKzQUZSdMWTavP:lMbpQmLULNx7vU6S8UZSqWTyP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b447c710f3ba2e47f8804de664166ece_JaffaCakes118

Files

b447c710f3ba2e47f8804de664166ece_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b621f67c63f024d26e5ecd2a29035c58

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
Sleep
HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
lstrcmpiA
HeapFree
FreeLibrary
GetStartupInfoA
GetModuleHandleA

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
free
realloc
_strdup

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 958B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE