00ed11a489b6df84b8919b6262b18d5f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00ed11a489b6df84b8919b6262b18d5f_JaffaCakes118
Size

76KB
MD5

00ed11a489b6df84b8919b6262b18d5f
SHA1

8bf4a2d0027a00804fb6a735617d3330c0a4ce46
SHA256

e35ced3ec5f9d2d247adc1f3c101b14bb8785380f00fc40da506915b34994e9d
SHA512

98a926f76df56125b249c631ae201f3da7ba873792a7a74fd19c85fee9f38793977c5b6700fa3295877107a92a15d03ed29b880e176c59e1b9f899729b73b945
SSDEEP

1536:1Yjyno8hH3P0DVww56FOhN5eIlaOs51KWGyfc4:2CoUH/0DV353hNlad51myf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00ed11a489b6df84b8919b6262b18d5f_JaffaCakes118

Files

00ed11a489b6df84b8919b6262b18d5f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

88468a2aad02cc7597aabe5e483f5202

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

HeapCreate
GetStringTypeW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE