11ed4fff3e1b733f1ef7ea021792c146_JaffaCakes118 | Triage

Sharing

General

Target

11ed4fff3e1b733f1ef7ea021792c146_JaffaCakes118
Size

73KB
MD5

11ed4fff3e1b733f1ef7ea021792c146
SHA1

133c071ebbc634145a7c56880fa329162aa56fe7
SHA256

b0c0864763844b1fd382f7981a51294da386bcf06903e581bbda86d89e6f3430
SHA512

82fd1261b14ecfe4effeef4a2bc87832bb768863d75a8328a9beed859ee22da3f4358c4be45b73416063a8b6542152fd51dd49b550d0ac475f428c886c781f27
SSDEEP

1536:CFQGgXOgQMnkp0KMQUCQDnhVp9QmBE81ictL:CFQGgbpnMZMQUCQDnzpami83L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11ed4fff3e1b733f1ef7ea021792c146_JaffaCakes118

Files

11ed4fff3e1b733f1ef7ea021792c146_JaffaCakes118
.exe windows:4 windows x86 arch:x86

62f205fe3d5e06c190cbad78ac9b9e4e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

pbvm90

ord137

kernel32

GetModuleFileNameA
FreeEnvironmentStringsA
LoadLibraryA
GetProcAddress
GetCommandLineA
GetCPInfo
IsDBCSLeadByte
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
GetACP
GetOEMCP
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
HeapCreate
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
GetStringTypeA
VirtualFree
RtlUnwind
WriteFile
GetStringTypeW
HeapFree
HeapAlloc
VirtualAlloc

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE