f5f31ff11929ae2097c84e2927c70eeb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5f31ff11929ae2097c84e2927c70eeb_JaffaCakes118
Size

432KB
MD5

f5f31ff11929ae2097c84e2927c70eeb
SHA1

bc8fd895f7851af958223d2b5c8f2a5b007a686f
SHA256

21bb11a093e005310503e0c4cb8b88ac8adbbdbc42f82fb263e2c98f9d42b5f9
SHA512

9522ae35a534d3e6c54073556d8df306f6cdaf9a4503ce30199f6343e8a893b3328db0e4eb86a02495d4e4988228928ad0acb3a2d2f28a470996c8f3bd40273f
SSDEEP

12288:b3xGKs1nJlHUrgfk3blmcWI7PR7XPJudlY:bB7sJlHULgcP7lXRudl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5f31ff11929ae2097c84e2927c70eeb_JaffaCakes118

Files

f5f31ff11929ae2097c84e2927c70eeb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

db09be387a61fc082f4d0248e52b6ddd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
UnmapViewOfFile
GetVersion
GetEnvironmentStringsW
TlsAlloc
SetEvent
FindFirstFileA
GetLastError
GetModuleFileNameW
HeapCreate
LocalFree
VirtualAlloc
ExitProcess
lstrlenA
GetCommandLineA

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 408KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ