f96ba348f67b838a12e7cc5090ead87a_JaffaCakes118 | Triage

Sharing

General

Target

f96ba348f67b838a12e7cc5090ead87a_JaffaCakes118
Size

255KB
MD5

f96ba348f67b838a12e7cc5090ead87a
SHA1

009f55d47866e111d6a3141597e4426a162e4d6f
SHA256

612903e35d182857889d2b421a91de013a4c8e51111a2eea39c56b0bb635191f
SHA512

1c3ae2447a7bec342498f16c1135cb33151c97fc57be4568e7d832af0c1dfab26a85f5289bc60e8f21a33e27b1a254b76892e4f8005639268f82cb6dbee299aa
SSDEEP

6144:gidNwjdVsUxUas213/AuhgtakuklUj0USmbcjj:gidNwTTi2F4X8+UQUNbA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
f96ba348f67b838a12e7cc5090ead87a_JaffaCakes118

Files

f96ba348f67b838a12e7cc5090ead87a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

499aa424102a114a35c5f8f782552ae6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
memcpy
_CIexp
_CIlog
strlen

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
GlobalFree
GlobalAlloc
HeapAlloc
HeapFree
HeapReAlloc

user32

CallWindowProcA

Sections

.code
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 236KB - Virtual size: 240KB