11161eca6c2c7901a730d438eb307e33_JaffaCakes118 | Triage

Sharing

General

Target

11161eca6c2c7901a730d438eb307e33_JaffaCakes118
Size

82KB
MD5

11161eca6c2c7901a730d438eb307e33
SHA1

92e3b9055bdba98bd3552768f6deb66db6eb5662
SHA256

b7c6cf8656c066a51c9a136ade8bfd8628bc172fcc3741dfc9c41990059f66b1
SHA512

2adb60cb219af283135598519cdada001911f0dac1c5986a15579618ac06d3aed5fe1bd82ab403d9773f5bad63513e68621111edea7f65f781ab73c443e9f11a
SSDEEP

1536:iGSV+FOCbTkrvjtGpLfdLd9rpyUPB1jK3kyBPczztPNXIWNISR+ruacWR/mlhu9:MV+vCQ5d9sUPB1O0yBP8JNXIW2SUrua3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11161eca6c2c7901a730d438eb307e33_JaffaCakes118

Files

11161eca6c2c7901a730d438eb307e33_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1d0b5ed1cce10857eff5edf0a86475de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
wcsncpy
wcscmp
memmove
memcpy
wcslen

kernel32

GetModuleHandleW
HeapCreate
HeapDestroy
ExitProcess
CloseHandle
InitializeCriticalSection
GetCommandLineW
GetModuleFileNameW
HeapSize
HeapAlloc
HeapFree
FreeLibrary
LoadLibraryW
WideCharToMultiByte
GetProcAddress
WriteFile
CreateFileW
GetFileSize
ReadFile
HeapReAlloc

user32

CallWindowProcW

Sections

.code
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ