07502f533e3ea751f95659fc0fb95378_JaffaCakes118 | Triage

Sharing

General

Target

07502f533e3ea751f95659fc0fb95378_JaffaCakes118
Size

1.9MB
MD5

07502f533e3ea751f95659fc0fb95378
SHA1

0c89eb85b0c6106699531ca21be36d2e6a2436a9
SHA256

a48df4ee7c35d2b3474e19ed84a5500f752c7b9d1051362ae7923a17c8d1bfa0
SHA512

67c0634b049bfebbcd95cf6958e7b25e62e8ccae102cf88d78432d9ecb88e2eff319c1d6cad86e580e6cde5094a3ca8806ace5639e969638c5f76afa62fc64b6
SSDEEP

49152:r6FzC7pDjCZE/KrUs6FzCScimdhqn6H3E//VhPGhHim:bEdimdhqnFdh+ht

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07502f533e3ea751f95659fc0fb95378_JaffaCakes118

Files

07502f533e3ea751f95659fc0fb95378_JaffaCakes118
.exe windows:4 windows x86 arch:x86

672a969ce0c12cd53633a53c650807df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
WaitForSingleObject
FindResourceA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
VirtualAlloc
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
GetStringTypeW

user32

GetDesktopWindow
PeekMessageA
AnyPopup

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ