b7e291aa847cef412c7ed76f2ae9d58f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7e291aa847cef412c7ed76f2ae9d58f_JaffaCakes118
Size

40KB
MD5

b7e291aa847cef412c7ed76f2ae9d58f
SHA1

ca54b6989c836f890a2d8f3f21b91d1c52037adf
SHA256

ed652a6b38f759ba625e3be46a22bebc6a6c7c1adcfbc4083f81ad60aaf8fa68
SHA512

d57d9021954a95f0b793b80da37d5f1124cf58ef2b692f091b1e0362727afe2c8cdedee5a9c68260382b879b6f83bd537e72d439bc68116cbe25edda22054748
SSDEEP

768:S98P39F/yQWrkoHD0QlI7mPn9GEz+jJGgDPeI:S9ESkoHgQlMmPn9GEW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7e291aa847cef412c7ed76f2ae9d58f_JaffaCakes118

Files

b7e291aa847cef412c7ed76f2ae9d58f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9d75662d173228e008303e8cf5e53596

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CloseHandle
TerminateProcess
RtlUnwind
GetCommandLineA
GetVersion
HeapAlloc
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ