090d48c1bef363a14032127139c8a534_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

090d48c1bef363a14032127139c8a534_JaffaCakes118
Size

42KB
MD5

090d48c1bef363a14032127139c8a534
SHA1

5781757e950373b6a56459f42ab9e6dad2ed61b2
SHA256

b68bbefbd915add91e86b20804779f633e931bb7082c1db1f3a7f450be734efe
SHA512

b8062e14dc436f98210f478036981eb6abc2e8e2e2861e59e42816cb5ec8803761060a94d5b3fd1386ea1d635a9ef9a6c4534c313d31f83222c3fbe870748b67
SSDEEP

768:Kqc31okjIa2Pwu4WhODdE22etBMNAORN0T74H7woUyBWRNaqoE0wdwvLQk:K1ZIa28RhBMw7Q77U8QNwwd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
090d48c1bef363a14032127139c8a534_JaffaCakes118

Files

090d48c1bef363a14032127139c8a534_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c43c9ecbd9ae06b0b77d5d29606f3766

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimeAsFileTime
RtlUnwind
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
ExitProcess
GetStartupInfoA
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetConsoleCtrlHandler
GetConsoleMode
GetConsoleOutputCP
WriteFile
GetLastError
MultiByteToWideChar
ReadFile
GetConsoleCP
VirtualAlloc
VirtualQuery
CloseHandle
SetFilePointer
SetStdHandle
WideCharToMultiByte
DeleteFileA

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE