c8dbd59e514de95c1ec68f737473419f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8dbd59e514de95c1ec68f737473419f_JaffaCakes118
Size

46KB
MD5

c8dbd59e514de95c1ec68f737473419f
SHA1

ad5125f6b1e47933f5f2fba7c2ece2d382fe8e13
SHA256

3610e686d716f3015e94c8ab39e7dbaa9d1572a16734272f0eba24b939b046b3
SHA512

70e907c287abab4dbbbe97f00f02c3282c62a21bc7b85ce07de39d51ea602cb5380aa25e576acf8348d2befd9094210b5e89d9179a468d00be09df5267670884
SSDEEP

768:rA9Mx00K0naDz0ykNnSxZof3dtV7ttUHhkcEM:0QnaDPcIof3tttkjEM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8dbd59e514de95c1ec68f737473419f_JaffaCakes118

Files

c8dbd59e514de95c1ec68f737473419f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f552f932ff63b9a955fcd3aae2875cfb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
RaiseException
HeapReAlloc
TerminateProcess
GetCurrentProcess
HeapSize
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE