e9ccb19df2349899824838a9afc9c4a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9ccb19df2349899824838a9afc9c4a2_JaffaCakes118
Size

40KB
MD5

e9ccb19df2349899824838a9afc9c4a2
SHA1

89cabf6e89753c995db783108bab432636318055
SHA256

06495021f49d99c166d5416545aa1b41463869392f2f2cb2a21c820a44d338f2
SHA512

2b4889f4f9a32edb2d3001f67ae911a0afb7a395dee0195776c6d8b6f50fc4fd77253128bb378d38af1a167e494a13ccc63e1590d13cf12ec4bacbe5ee7c8202
SSDEEP

384:j2otn0a10TlQCxfrwntajXjDWLi9k+7yfnrF6oZ6imG:9n0pTBPJn7SrF6oEimG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9ccb19df2349899824838a9afc9c4a2_JaffaCakes118

Files

e9ccb19df2349899824838a9afc9c4a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eb8f8dc567572f6c0cf25f671d18c41a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
GetModuleHandleA
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE