0838a1cb3c0ac8492ed0996608f46f22_JaffaCakes118 | Triage

Sharing

General

Target

0838a1cb3c0ac8492ed0996608f46f22_JaffaCakes118
Size

36KB
MD5

0838a1cb3c0ac8492ed0996608f46f22
SHA1

205fb511d713d27c425269e8c25bb4a256753144
SHA256

06c007993703254a4fd1b982b7a61206ddd44b987b5507bfc007b7d95d5ab8eb
SHA512

9c98125f6221b8241834e04a535a7a0e4b266bf7d5102b04e51408694394eef8ba52fa99696c4d3d7e7014a4f222df58af1667689edee7ad22e7de5244e7bc8f
SSDEEP

768:M/PhAvo/db9bxLcKpkhSVAehX1a476SUmSHhPJ3htQOHwd:aPhAQ1H0Qyk7vleRzLwd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0838a1cb3c0ac8492ed0996608f46f22_JaffaCakes118

Files

0838a1cb3c0ac8492ed0996608f46f22_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6581396a9f8f7d24a843db3c60341a31

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
Sleep
HeapFree
QueryPerformanceCounter
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetTickCount
ExitProcess
GetModuleFileNameA
VirtualAlloc
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 710B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE