f6c56ef0c60afaedfb9b0878d269aee8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6c56ef0c60afaedfb9b0878d269aee8_JaffaCakes118
Size

160KB
MD5

f6c56ef0c60afaedfb9b0878d269aee8
SHA1

2860441809768090e75729b5712b6103772425a5
SHA256

50c05af1dfc62a202db54545883c2865421a17301a090461486c94589e6ce93b
SHA512

e797c43cef361bc125043b249c09f9d3171cab134bc65c941fe1f191a83c48c6179ba9508d992b5ad33ad78459071a9938c8a5753e34ae46e5ee0c6a75694780
SSDEEP

3072:oywt6nknUrvw9IgMHUkS6xYsSYX5MrQB5JF6VtN:B6UrYwO6GUEC5b6B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6c56ef0c60afaedfb9b0878d269aee8_JaffaCakes118

Files

f6c56ef0c60afaedfb9b0878d269aee8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7675f13b48f300574f2b99875afd7eb4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetProcAddress
LoadLibraryA
GetStringTypeA
LCMapStringW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
LCMapStringA
GetStringTypeW

user32

wsprintfA

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ