eb6d23f03c8376880c4cdefde00d7976_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb6d23f03c8376880c4cdefde00d7976_JaffaCakes118
Size

28KB
MD5

eb6d23f03c8376880c4cdefde00d7976
SHA1

c0ee379c1fb23fdc660cd8ed96f9dcbf9f381031
SHA256

6f529a3729b5de7a543698fc3e0fc34289abb1a4490ccaeb4a75b0f3cfe6f16d
SHA512

ce156addc4e2b97fddcb7674a66b4d39fd522183e4b7845c2b401fcc357dac80c746e947476703c117d395b0626d4b20f19fbe43f797c9626b7fc6fc41020f51
SSDEEP

384:VON9Z8CkF0mliPzn7qEmR/aM+y7d0n2J1Qoj:VoZQdEc/4Qd0Y1Qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb6d23f03c8376880c4cdefde00d7976_JaffaCakes118

Files

eb6d23f03c8376880c4cdefde00d7976_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d72c0f5a8f316844236342ac51a01bb7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
GetStringTypeA
LCMapStringW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetLastError
CloseHandle
ReadFile
TerminateProcess
GetCurrentProcess
SetFilePointer
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
MultiByteToWideChar
LCMapStringA
GetStringTypeW

urlmon

URLDownloadToFileA

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE