d061f01858fd9c9218e9d3e4ebc5ce7e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d061f01858fd9c9218e9d3e4ebc5ce7e_JaffaCakes118
Size

862KB
MD5

d061f01858fd9c9218e9d3e4ebc5ce7e
SHA1

397edd36fd6b1ca25fafb9528109b68eb0a03efa
SHA256

fce2fc7181048e21d06b128ada225df3ac858503eed65da681151737350aa973
SHA512

f479e3dc4977d5643857f78db65a725cb7c37e67b7ce1dc7172d487605e4a67888d709a57f10c8613a026f393442dea9d84f2013efa20e6f0081d471e9995dca
SSDEEP

24576:OAJxbG6Z1JSTYEBPtaO0WQUgW219q0Qgk:Ott/PYblWYQgk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d061f01858fd9c9218e9d3e4ebc5ce7e_JaffaCakes118

Files

d061f01858fd9c9218e9d3e4ebc5ce7e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1cdbf8f371191d075cf4d97f708e26ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
strncpy
memcpy
strlen

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
GetModuleFileNameA
GetCurrentThreadId
GetTickCount
HeapAlloc
HeapSize
FreeLibrary
HeapFree
LoadLibraryA
GetProcAddress
WriteFile
CloseHandle
CreateFileA
GetFileSize
ReadFile
SetFilePointer
HeapReAlloc

Sections

.code
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ