e1a34299eb26415aedd3dcea142fb481_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1a34299eb26415aedd3dcea142fb481_JaffaCakes118
Size

44KB
MD5

e1a34299eb26415aedd3dcea142fb481
SHA1

46f9779ab66399ac4197a7230e8fa0b054751139
SHA256

1aa678d68d9ff4a5c1ab09208dfb0303428172c21b860f8b951fe138651f7345
SHA512

2cac4f76860ba561d817f56c9f2c90c9accd3ef433445199f82407c7d975257f49d8462c23740bb467bd2e376cef4065a51d8ef0bb43845169f866f39f5847f5
SSDEEP

384:cOTOrPiuCBtXPxhelWt9syMarF6oEoXVPI/2Jb6Ja8AL2o7LHu6f1y:3TO2ZDnqx8F6oEoS2gJaZ2o7LHu6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1a34299eb26415aedd3dcea142fb481_JaffaCakes118

Files

e1a34299eb26415aedd3dcea142fb481_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3c2217fcb23eab42b253c44833172ee6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE