12ead31e7134c75fd42d060711b505db_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12ead31e7134c75fd42d060711b505db_JaffaCakes118
Size

42KB
MD5

12ead31e7134c75fd42d060711b505db
SHA1

fff28d05025ddf0aa30a26920d1c9db43406c5a3
SHA256

db36be905a809d1a7df79491649245c33e5604d327d72ff538fb6f470fe65cda
SHA512

c4982fed004286f85a184843adf1d2c836b7f75cb855bbac427c2b12b90c489ffe15f8e0c6fe3c84ff6b0f5d84280d9a4b38cf67d8d988b59a8296db96b3f744
SSDEEP

768:UY031o0GI62H4uI9hODdE22+tBMFAORr0D74n7goUyBere8qDG0keHvLQk:UbII62rRhBMG7g7rU87lke

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12ead31e7134c75fd42d060711b505db_JaffaCakes118

Files

12ead31e7134c75fd42d060711b505db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c43c9ecbd9ae06b0b77d5d29606f3766

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimeAsFileTime
RtlUnwind
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
ExitProcess
GetStartupInfoA
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetConsoleCtrlHandler
GetConsoleMode
GetConsoleOutputCP
WriteFile
GetLastError
MultiByteToWideChar
ReadFile
GetConsoleCP
VirtualAlloc
VirtualQuery
CloseHandle
SetFilePointer
SetStdHandle
WideCharToMultiByte
DeleteFileA

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE