00ca33ab7bf484c049b55699b41685b1_JaffaCakes118 | Triage

Sharing

General

Target

00ca33ab7bf484c049b55699b41685b1_JaffaCakes118
Size

6.9MB
MD5

00ca33ab7bf484c049b55699b41685b1
SHA1

8a6ea5580c7a06e7923c8be704b60d1fe430981d
SHA256

4b12dba2798f942f6e4d1ec19785a199dbf7d1fd784a41a4155f3f5b283219cd
SHA512

7a85b67a24cd11a7b32aae5c290cbc012cd8460cd7f8e028e7cbb53fb5e65111496fe6721556d1044e29ce5fb3a4ede60125471b92b30a7aa527c20e7b541cac
SSDEEP

98304:ppY/0ifios3VrOI4GiABaQJQMqv6Bks/Av7Opd1WFDoDViznORyDvr0ULM7I+ZBW:g/qlrVo8+MqS17wNoDVC+yDTH4RK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00ca33ab7bf484c049b55699b41685b1_JaffaCakes118

Files

00ca33ab7bf484c049b55699b41685b1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

efde6c407987396d9866a0df10cf3988

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
Sleep
WaitForSingleObject
GetLogicalDrives
FindResourceA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
GetStringTypeW

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ