1307fdb2948bd087700d1205fe4450ba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1307fdb2948bd087700d1205fe4450ba_JaffaCakes118
Size

40KB
MD5

1307fdb2948bd087700d1205fe4450ba
SHA1

9332ab9d9c32a660d67a3c92ea0f771398262507
SHA256

a8ae820d04246a2881d18a625867bd511183555bddb9acd4ad3b97f51e52da78
SHA512

22b4faaa2a9fddb3cc5c96e7c9a358b240c46b69e2a92e23e233a3dc33d248040dfbad73ef89cd9e5cfc22173ce9aeba9be7a9aaec9f44252f0fd6f90a61870c
SSDEEP

384:ask+P9FMug7iBESHQ+yyo9JxTVtN7aaTPKt/CsWAAPpBTm/sZW0lx1fvTro:a30Qp+2Sw+0Z75T6auAnTjQ0lPfvTr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1307fdb2948bd087700d1205fe4450ba_JaffaCakes118

Files

1307fdb2948bd087700d1205fe4450ba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

336f752684c738f5071ba5e1d0de5cef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
Sleep
CreateProcessA
GetStartupInfoA
ExitProcess
GetLastError
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
GetModuleHandleA
GetCommandLineA
GetVersion
SetHandleCount
GetStdHandle
GetFileType
HeapAlloc
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
VirtualAlloc
HeapReAlloc
FlushFileBuffers
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE