102b5a5e26dc66068ce1ce139eee9a4a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

102b5a5e26dc66068ce1ce139eee9a4a_JaffaCakes118
Size

177KB
MD5

102b5a5e26dc66068ce1ce139eee9a4a
SHA1

f0b9a0d8a7fa8db8e2063666324faa81c2761720
SHA256

1e2c1734c489c2e13c7347bf592060c994a7d0678a0f92a51be91d6de1391e24
SHA512

ae9cd9343f23a3cb8eb812ef85910ad79d6d8fcab25b041041584593575e905e107b8dd2f1ad8e446eecbba9389949925e6659176c9c203cfc4ca2b73db694bf
SSDEEP

3072:p4vDSnlnxZhPtVg+5BsdcJKJBnTpH0oRUR/LhlnE8UwNYp7bSRULhzOfj4WACHXu:FOkOFpHtGtLhlE8lIbiUKfsWlHX0B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
102b5a5e26dc66068ce1ce139eee9a4a_JaffaCakes118

Files

102b5a5e26dc66068ce1ce139eee9a4a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4df9e585fff8489fa5e72cc07ca4f0c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
HeapCreate
QueryPerformanceCounter
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
CreateFileA
Sleep
ExitProcess
GetModuleFileNameA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE