0417f304e5161217c63aee28545b3817_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0417f304e5161217c63aee28545b3817_JaffaCakes118
Size

146KB
MD5

0417f304e5161217c63aee28545b3817
SHA1

fe7e2866045c594b482a8ae2e37725ebcb690404
SHA256

ce1d65d20259d1857840abd92b0378b2b7db433eef287844cbb28e5663afacc2
SHA512

e5ede641b8ffecd2d7502f2c8936ac676b909f1db9e808ac51800600f1b9f6570f5f3472c2256b0a35028db7e4819ee335abb8560ed4230aee602170bf9fbd05
SSDEEP

3072:SS1sRqMDoAEyDsp3wrH8Pm/OPTfH/IXFEtaKj3tIDnFzOVi3j:SS1s3KwrcrPzHwXFEtnGDFYi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0417f304e5161217c63aee28545b3817_JaffaCakes118

Files

0417f304e5161217c63aee28545b3817_JaffaCakes118
.exe windows:4 windows x86 arch:x86

812c27df5aa353fe5098542519bb9907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 114KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ