c2a07e53ae6fd5840e979888cb39ccb4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2a07e53ae6fd5840e979888cb39ccb4_JaffaCakes118
Size

145KB
MD5

c2a07e53ae6fd5840e979888cb39ccb4
SHA1

03acf534ce51a25ba61da8053408455a9f13f3a2
SHA256

176045ec88fad9390d1df919c309a10ec498707d72b15a7e3a99bdc9472a9c76
SHA512

4ce39a1a7862ce0a1fa19afacc9404e73f9dc8c0b12dd3f91097bf93d16d4a96ecc5f9edf1ac833019f84462a235ee7cfae1535d85897b6d7152c363b7f93787
SSDEEP

3072:3GY81nl2OkRvstoFH2OmvQHrghe1eXuURaWBPC:upQOTTOm9XlEWV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2a07e53ae6fd5840e979888cb39ccb4_JaffaCakes118

Files

c2a07e53ae6fd5840e979888cb39ccb4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

903035e9b7e5e9e17b6636b16dc5eb20

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
lstrcpyA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 86KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ