ba270579222322a1130325da2aa91b97_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba270579222322a1130325da2aa91b97_JaffaCakes118
Size

56KB
MD5

ba270579222322a1130325da2aa91b97
SHA1

9e7941a569c7ecf07faf91776f8482818737fe0a
SHA256

85bf8bd7bfb9aa255ba266fb88e5fbb27707a6e46ffd495abf7a16ce51134bd3
SHA512

c88301e4b6870c79cbceb8d2dbd87bba643c3debe1001d2d7ebe10ef069688787acddff8720b7ed24f6e4ea972ea8faad3e439838c9a4927d2cfd0497e507171
SSDEEP

768:6OpdcqDZYHz9FBrXXoPSKDEl8Yx9HCoyihdQ:6OpzOvXoPSUu8YiorhdQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba270579222322a1130325da2aa91b97_JaffaCakes118

Files

ba270579222322a1130325da2aa91b97_JaffaCakes118
.exe windows:4 windows x86 arch:x86

373ba1801bab029c68de29be7f0e029f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WideCharToMultiByte
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapFree
GetCommandLineA
GetVersion
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
VirtualFree
VirtualAlloc
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
ExitProcess
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
WriteFile
GetLastError
FlushFileBuffers
ReadFile
CloseHandle
CreateFileA
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetStdHandle
SetEndOfFile

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE