2dd82a75a12242d5b28e4749a71be796_JaffaCakes118 | Triage

Sharing

General

Target

2dd82a75a12242d5b28e4749a71be796_JaffaCakes118
Size

35KB
MD5

2dd82a75a12242d5b28e4749a71be796
SHA1

74e3710f11bab3a2b5ec3f7b069c46d41e6fda1a
SHA256

65e3eb89daccdbc3b1e6b3b4c4514a28966b36163a2f55645b1679359aab4589
SHA512

cf865a77a63d436d2ef973358b9ac339ea7aaf117607c2589425776d57401f641ce8bbc5eeaaa95793e76da7fb0ac71d8bdc439cc73e4dd375dcf9bcf289e3d1
SSDEEP

768:i6niCuoE41VrWi132g8n0WQN5Ctk3M2T:VTuoEY780WMCOT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dd82a75a12242d5b28e4749a71be796_JaffaCakes118

Files

2dd82a75a12242d5b28e4749a71be796_JaffaCakes118
.exe windows:4 windows x86 arch:x86

14abcfb04e9fc02bbd3dcda121f946fc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetModuleHandleA
GetACP
GetOEMCP
SetHandleCount
GetFileType
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
WriteFile
HeapFree
HeapAlloc
VirtualAlloc
GetProcAddress
LoadLibraryA

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 823B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 822B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE