d746ca2f800966836e9675ce9818f2aa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d746ca2f800966836e9675ce9818f2aa_JaffaCakes118
Size

28KB
MD5

d746ca2f800966836e9675ce9818f2aa
SHA1

be4a4814c435b9ecd917f658e590e35295f9f179
SHA256

31cd9d3095fccc85ba64928b05828e85f0a0565aacca78327f83c98d7b088ce0
SHA512

da240f320258417bb535b31d54d89ecd4e12996d7902f462c88ae86cf5c20576b206ee3ce095905228d5bb0c86c4d06396bdfaa219087c681d75f1b99b267b5c
SSDEEP

384:PcAIR8fKfFW3NItpbypDkYPN47gIlBaYd15J0GWlNds8LQfwSxG1uQjlkLyUZmN4:qREKfI3As5N4MIbaYZ068LmvdmNN2hq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d746ca2f800966836e9675ce9818f2aa_JaffaCakes118

Files

d746ca2f800966836e9675ce9818f2aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a31fd0bf0eeaa591e973addba8fcabd3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
lstrlenA
GetStartupInfoA
HeapCreate
GetConsoleAliasA
OpenMutexA
GetLongPathNameA
GetConsoleCP
Sleep
GetGeoInfoA
GetNamedPipeInfo
HeapAlloc
HeapDestroy
VerifyVersionInfoA
VirtualProtect
ExitProcess
HeapFree
HeapCompact
GetThreadPriority
SetLastError

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 525B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE