f982a3eff485f5905ad5b79e19a6c9ea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f982a3eff485f5905ad5b79e19a6c9ea_JaffaCakes118
Size

41KB
MD5

f982a3eff485f5905ad5b79e19a6c9ea
SHA1

2c20d71752d79e1e304a9202f129b4b948c33461
SHA256

71165468c311cf717e851edf80f3b77d16801b62a126cc807b8e2bbca00a4f39
SHA512

363fe771af5e65c74c196436a552f2c5492fc6b9ca9457be1c159805bbd3c320ad36e22d7ddf177ed7a06721dd1ef7d41c93c9ca837512190730db6a3d9aa544
SSDEEP

768:znU/VAfp1jZOwDxmhTCtWUHpoDpToFxKZsLGsZSF:LU/VI1jZnF+utWIiDxuxq61s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f982a3eff485f5905ad5b79e19a6c9ea_JaffaCakes118

Files

f982a3eff485f5905ad5b79e19a6c9ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9edf5572c7916dda9be89b00f5af769f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA
CloseHandle
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapReAlloc

Sections

.text
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 26KB - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ