12a4edda27a81a570f9fd335bb88e010_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12a4edda27a81a570f9fd335bb88e010_JaffaCakes118
Size

108KB
MD5

12a4edda27a81a570f9fd335bb88e010
SHA1

51bd59b365e27da23b0d8067e1dc8e93a7a29cd9
SHA256

71235547c574d2812e1a16991cd17ebbded117b0bd7efeb1d94683048fb18769
SHA512

02d4d34ae4f5bec36abadbe16fb6426e1ef97514efeefa9343870a0bf820bcf0f6b073bcab447a4636ae39f4456bd73dbf1fc3147c9048bd20419a5fb415cf2c
SSDEEP

768:RiIOsayO5Rs0coPTBQ7j8++MePR0JF2idt:RiIDtxo674++MBf2i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12a4edda27a81a570f9fd335bb88e010_JaffaCakes118

Files

12a4edda27a81a570f9fd335bb88e010_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8e42b5c2a0e590f0f2c2f83d3df77fe1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetProcAddress
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleHandleA
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ