09adc8038084bd16722cdf074e2f8736_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09adc8038084bd16722cdf074e2f8736_JaffaCakes118
Size

101KB
MD5

09adc8038084bd16722cdf074e2f8736
SHA1

8d12bfb613c1d336e5cd0a7bda1d67bde51d590e
SHA256

8aaadefb6e873d6d0c4976506d932fa5ddcb11b86e1ec16f6b035f9427348354
SHA512

af8c9d3da6df42af359ff24bd47e555a7f24907a68afbd6410b838e9f4013eed5d381013a778f9a261277ce26ddbd7c4c1785e4d2fb0978282cafc890b38153c
SSDEEP

3072:son/Npoi2k9Hc3/nl6LAHkzI1UEgEA6IIyR:1Npo1k96dAD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09adc8038084bd16722cdf074e2f8736_JaffaCakes118

Files

09adc8038084bd16722cdf074e2f8736_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1f26165383917cda1f24c53996fbc4d5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateEventA
CreateThread
FormatMessageA
GetComputerNameA
GetDateFormatA
GlobalAlloc
LoadLibraryA
LoadLibraryW
LocalFree
MoveFileW
ReleaseMutex
SetErrorMode
SetEvent
Sleep
TerminateThread
WaitForSingleObject
WriteConsoleA
lstrlenA

user32

DispatchMessageW
GetWindowThreadProcessId
IsWindow
LoadCursorW
LoadStringW
DestroyMenu

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 642B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ