0975a5c115f2a8cc15e856da7785fc30_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0975a5c115f2a8cc15e856da7785fc30_JaffaCakes118
Size

52KB
MD5

0975a5c115f2a8cc15e856da7785fc30
SHA1

320910b824fca43828943e706756dd77d4169f0e
SHA256

1b8577f76f044bd84062ec2f029fe3e524ccd737b9cb15733b7083509efe151a
SHA512

c1a484b12c1f4e38d34178e8f82dc5e9bcf6d5503bd2656c4bd171d6494cb5c6a0be19074c6bd85ccb1c9e8b4026e714fe4f3e957832b13f944c631700c3adb3
SSDEEP

768:qk/nH7+OKq4xEn7nn6xwhGMPT720P599Mc4Cr6BDYYZDpuF4:qk/nH5Kq4un766hG4qoD4Xlp6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0975a5c115f2a8cc15e856da7785fc30_JaffaCakes118

Files

0975a5c115f2a8cc15e856da7785fc30_JaffaCakes118
.exe windows:4 windows x86 arch:x86

17ac1c8a533312daecee1a18a5ec137a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
InterlockedExchange
Sleep
InterlockedCompareExchange
HeapFree
RtlUnwind
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
HeapAlloc
SetLastError
UnmapViewOfFile
SetFileTime
GetFileSize
GetFileTime
CloseHandle
CreateFileA
MapViewOfFile
CreateFileMappingA
SetEndOfFile
SetFilePointer
HeapDestroy
SetErrorMode
LoadLibraryA
GetModuleFileNameA
GetProcAddress
DeleteFileA
GetLastError
ExitThread
GetProcessHeap
EnumDateFormatsExA
ReplaceFileW

Sections

.code_01
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ