041f1786762e19b8f29423a19ca0498c_JaffaCakes118 | Triage

Sharing

General

Target

041f1786762e19b8f29423a19ca0498c_JaffaCakes118
Size

98KB
MD5

041f1786762e19b8f29423a19ca0498c
SHA1

5ccb39b1480d9c693b429f35b0f7f3e5afb0730e
SHA256

8268704a7d561c3b77519503ac645bee86e62991cb3844bc90e12515d468afcd
SHA512

41b565b4e981fca822f9c95ea65ef1da13386a199612609d94a4056cc04824abf03e70bdc5e7869ebd47dfc1ed36f5eda40dd665070b9b557e35cd07b726c6ec
SSDEEP

1536:2u7R8+GeLxCi1s95kG0tTZaNxas1Y29db/vIHduOfpkwMEkR:2u7RBtlHs9z0PSxJ1T1/vIAEyLEs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
041f1786762e19b8f29423a19ca0498c_JaffaCakes118

Files

041f1786762e19b8f29423a19ca0498c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f75deaeee59c42ccc48867f096a66c77

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

clusapi

ClusterEnum
CloseClusterGroup

kernel32

GetSystemTime
WaitForMultipleObjects
SetLastError
GetOEMCP
SetEnvironmentVariableA
LoadLibraryA
FindFirstFileA
DeleteFileA
GetVolumePathNameW
WriteConsoleA
CreateWaitableTimerW
VirtualAlloc
CreateSemaphoreA
GetCurrentProcessId
OpenMutexW
GetModuleHandleA

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ydata
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ