11aa7ac3b42a3592bacc7f21c260f291_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11aa7ac3b42a3592bacc7f21c260f291_JaffaCakes118
Size

36KB
MD5

11aa7ac3b42a3592bacc7f21c260f291
SHA1

e820cb5887894983fac8c1a5acf1acc41569c261
SHA256

dae02826e8607db90e6257ddc830188412bd8c3876c5938049a615e7e6cfe8b2
SHA512

b933341840e65c0b149d299960acaf6aa3316bf4aa5265c918b5994133a1edfc2596ec00aab2507a2581370f71cc20acc7ee49fa5e7a2ce6d214a2b2d63438d2
SSDEEP

384:0zupvEeoRjQI23CdbKeBNzTW7C91mKdyUlXz84tDV:0svEztl4EN5MKdhlj84t5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11aa7ac3b42a3592bacc7f21c260f291_JaffaCakes118

Files

11aa7ac3b42a3592bacc7f21c260f291_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a6dda644aec921baa6b11777d5b9435c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
Sleep
WinExec
GetVersionExA
GetStringTypeA
LCMapStringW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
GetStringTypeW

user32

wsprintfA

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE