25b651d067fad8c20cf0763836a4177f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25b651d067fad8c20cf0763836a4177f_JaffaCakes118
Size

17KB
MD5

25b651d067fad8c20cf0763836a4177f
SHA1

2634f304a95be7b08cf366ef769fa532c1383d05
SHA256

bc3f1e6f110b40360ced07c93a0dce06af7dbee373c26ec9bb2c10ab587a7831
SHA512

24b3d1e872b30708744388605b6de664d2bb4e883c2ac9d14a8f7c9556bb194a5ec282eee1a25fe1bea053edf6b6ecdcdc9ac0f43390cab5f481b7a7e535af84
SSDEEP

384:JOh60bqLD2X+aJ9gIID/ZB0N+dlmZqm9qu7vLaMlamFXXk:YhGauaJ9gIID0N+dHpujLapek

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25b651d067fad8c20cf0763836a4177f_JaffaCakes118

Files

25b651d067fad8c20cf0763836a4177f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c803ae527d188028d2ced026091fed6a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleHandleA
GetWindowsDirectoryA
FindFirstFileA
FindClose
FindNextFileA
GetLocalTime
GetStartupInfoA
ExitProcess
RtlUnwind
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
GetSystemTimeAsFileTime
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetConsoleCtrlHandler
VirtualAlloc
VirtualQuery

user32

MessageBoxA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ