ded95b9f7ef105738015f5abc9bd1cbf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ded95b9f7ef105738015f5abc9bd1cbf_JaffaCakes118
Size

404KB
MD5

ded95b9f7ef105738015f5abc9bd1cbf
SHA1

1e97f8bd5e3d24024b34df41dc176e9574491376
SHA256

b0090f86eda7dc349e87d63887434f450b25ed55701d47a9877341a141d8b07c
SHA512

31c3dc704b33d9f974b4ea583305b6bf1379302ade9715c9213aacfb31ff6c03e60a0d348100578170ba723ecd011e3f4c9a6a5d3a34e2fe8b7f6c95393587a3
SSDEEP

6144:xVV+n1XwhLP8yZ6gg6cKJ5R/zytgEbkLMvA/Y3Nb7FMqkpLM8gvui:1+qhL0yZXcKHRrmzbuh0bh6pY8gvui

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ded95b9f7ef105738015f5abc9bd1cbf_JaffaCakes118

Files

ded95b9f7ef105738015f5abc9bd1cbf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

009db8af3ec708d323db012155258f57

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetProcAddress
VirtualAlloc
GetModuleHandleA
SetEvent
GetStringTypeA
LCMapStringW
LCMapStringA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
GetStringTypeW

user32

LoadIconA
LoadBitmapA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 332KB - Virtual size: 724KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ