53ce4dbcb1ccf48bb14aae1fc19b6967_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

53ce4dbcb1ccf48bb14aae1fc19b6967_JaffaCakes118
Size

396KB
MD5

53ce4dbcb1ccf48bb14aae1fc19b6967
SHA1

927f8cd6e40c36b32a9710bc608a1d67d310d427
SHA256

e163b8589fc18e958caeb410e1ee4e73f30490107fcc14668e1185b6872c0cd1
SHA512

88efb2fcb56b69788e166322e9e45992ab1cd0000c2c24dd7cd2a81b459844af3408948b9ebdd964b10ead3c71e8a016d398c932b1bf8ad4fb16c9cb1bfc8173
SSDEEP

6144:p8ouJf4ASp3Jfvo3vH3CwcQAadhFz9tB0mRSNQDUKYknoXKTQGJii16N:p89x0J4P3CSdhFpr0MSNQo8noKh1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53ce4dbcb1ccf48bb14aae1fc19b6967_JaffaCakes118

Files

53ce4dbcb1ccf48bb14aae1fc19b6967_JaffaCakes118
.exe windows:4 windows x86 arch:x86

35a30eece00320d9c866b87a6e0c849e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetProcAddress
VirtualAlloc
GetModuleHandleA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
LoadLibraryA
GetStringTypeW

user32

EnableWindow
ShowWindow
SetFocus

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 252KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 503KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ