edf43efd093b00826c79a1400cbb58e9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

edf43efd093b00826c79a1400cbb58e9_JaffaCakes118
Size

112KB
MD5

edf43efd093b00826c79a1400cbb58e9
SHA1

020138888ef07f61cdef1963bce8857285305103
SHA256

73e743ecd1db181dfd33a5793f2812e145c0bf24a0c65c5664fc2b891ce167f7
SHA512

199994dd3229dadea611b3585d4a2753c3b45c8de021b512bcfff97d239e27967e86f554118b4768ee1a1a674a9481b042d67cfe570bb4fccbd8fa5a3b3e2155
SSDEEP

1536:NvW90XkLUw4YHE7BHSXYlzJVbQUGQ8vbwjj0HJgl5IsVnaLkVm+HKsAiDr:Nu2XPw4TtyXYl/bQUuU0H6MImVE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
edf43efd093b00826c79a1400cbb58e9_JaffaCakes118

Files

edf43efd093b00826c79a1400cbb58e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3cc7584cb83b97510d16cbf5a3fadfee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
GetCurrentProcess
GetCurrentThreadId
GetOEMCP
GetProcessHeap
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
InterlockedCompareExchange
InterlockedExchange
LeaveCriticalSection
Sleep
UnhandledExceptionFilter
VirtualAlloc
lstrlenA

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 454B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ