db45677b16fb39305178a99dab4874e6_JaffaCakes118 | Triage

Sharing

General

Target

db45677b16fb39305178a99dab4874e6_JaffaCakes118
Size

61KB
MD5

db45677b16fb39305178a99dab4874e6
SHA1

b022c3b9c7aef2ba62899fd42b69f5eef696d30d
SHA256

d860f6cd7bec3887ea2205c6a09bf753f08501fac9d1a6ec1ee04eea515c6ff2
SHA512

7df6814b5a066cbc1d5ae2733ea67f7eb3b9cc9e2eda484810178214b3eb0a8c69dc42f41a458ac1a27a9305e2ca3d41b4608997c3b571b45b630642ba678723
SSDEEP

1536:5NbYzDLPzrpsG9FClRn2oHPVd9Lj2Dn0kyakAYaO74:54kl5/9LjgYpAYV7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db45677b16fb39305178a99dab4874e6_JaffaCakes118

Files

db45677b16fb39305178a99dab4874e6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c283f728aebd578622c69035e18acaaa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceCounter
GetEnvironmentVariableA
HeapAlloc
FreeResource
GetCommandLineA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
GetStringTypeW

user32

DestroyCursor
GetQueueStatus
CopyImage
LoadBitmapA

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ