426793ca868ec84f26bf54e08cb988f0_JaffaCakes118 | Triage

Sharing

General

Target

426793ca868ec84f26bf54e08cb988f0_JaffaCakes118
Size

126KB
MD5

426793ca868ec84f26bf54e08cb988f0
SHA1

5a27af370c442304f24ef3e02bee001371083199
SHA256

ce08ff273c2a52e3abd62da4d77e879553efeb7f6533574b8aa2a21345436d2f
SHA512

cb1d2b53fab6c6bf113546e9fcd73b72074d009a23d091d984742f660b8634b7f90dede7dfa0c6519746d520b5a34db841e6e358ef8dff2011101389abd93820
SSDEEP

3072:2He3m89edLyQbDPyIdcYpXddbVbuvHqEmN2H2sJeeEJUaLhMiRUZTCJp:HMcKX2HqTN42sJenIiRX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
426793ca868ec84f26bf54e08cb988f0_JaffaCakes118

Files

426793ca868ec84f26bf54e08cb988f0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f580235d19d6297a647aad87eeeb80c5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
QueryPerformanceCounter
CreateFileA
Sleep
ExitProcess
GetModuleFileNameA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE