52f1e149cf24ea193b99b864ce240ea4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52f1e149cf24ea193b99b864ce240ea4_JaffaCakes118
Size

232KB
MD5

52f1e149cf24ea193b99b864ce240ea4
SHA1

9bbee78e6da0d7a6b30ef53b1e3c7faf1478eb1c
SHA256

466e3f8bf35b6017bdc3b225f392d34154b5ac812049b98445c41b0edff07f62
SHA512

0e81281aac22150ba45410b52847eba178c7513f4dd3cec2a43df34991d40161a162d30019eb811a1a6ad41a2634b23a81ce06255c37bbd7752be7734959c1d9
SSDEEP

3072:e432Gs3H2T4oe8cCZ3QK8YcLLuqjRlsWcy8ig5Nii+z2xRe/darF43F3AQLUSC2O:el3HJbClQKVW7Nl0xH+8R6arW36Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52f1e149cf24ea193b99b864ce240ea4_JaffaCakes118

Files

52f1e149cf24ea193b99b864ce240ea4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

68c39ba66b567c5d2eea9b2648b30041

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
CreateProcessA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 188KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ