0987373c870a037fd8bef73b1a228b4d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0987373c870a037fd8bef73b1a228b4d_JaffaCakes118
Size

40KB
MD5

0987373c870a037fd8bef73b1a228b4d
SHA1

98b0979db97f0230d573e5c52ca9140677819d64
SHA256

f4c1dfb25be35806699c3413e8f1b695139cda7b6449415da32e780827241d84
SHA512

953a83c2c09055be2b1ffbb493bbfd5beb07788f1a99f0d824c68153b75a927ec166918d57d590609957ea834fc8a46a5337850eb44c2c78d4e0c25e00157b78
SSDEEP

768:Aw73MU3DrSkEBvrXeTdFOafUX+HybQVxubkNa4+lT2B/PGnW/pQY8kzk:Aw7PapvrXeTd4XX+HybRbC7vB/rp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0987373c870a037fd8bef73b1a228b4d_JaffaCakes118

Files

0987373c870a037fd8bef73b1a228b4d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cfa927e4ddd32b960b276cab1c4fcc88

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
ExitProcess
GetSystemTimeAsFileTime
GetStartupInfoA
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetConsoleCtrlHandler
GetConsoleMode
GetConsoleOutputCP
WriteFile
GetLastError
MultiByteToWideChar
ReadFile
GetConsoleCP
VirtualAlloc
VirtualQuery
CloseHandle
SetFilePointer
SetStdHandle
WideCharToMultiByte
DeleteFileA

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE