0ed220267895973846cbe98a74b8c1ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ed220267895973846cbe98a74b8c1ae_JaffaCakes118
Size

99KB
MD5

0ed220267895973846cbe98a74b8c1ae
SHA1

acda4b80780eb5c1646d2c5a2b48fad5e412388b
SHA256

cbb60f01ce3605cfcc3a5df50f70663a093176d748645142b0ff8bbeda60b5fe
SHA512

cce51e7ee40d912310b2dcc1db68a858492e2f7f4b61a58afb058521f7ba36b272750fca2f6495931e263ba03e7f777714ec0233c8d07a92f7de100fd236f5b4
SSDEEP

3072:Tn1sPyzul9tgSCGMhoy9sngRXSr/6VWacRLyANmJ:zm19tgSC7a1ngRiz6kR2HJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ed220267895973846cbe98a74b8c1ae_JaffaCakes118

Files

0ed220267895973846cbe98a74b8c1ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cee9eac69a32ee84176b5645b2cb5210

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
TryEnterCriticalSection
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
lstrcpyW
LocalHandle
CreateEventW
WaitForMultipleObjects
HeapSize
GetModuleHandleW
HeapAlloc
LocalHandle
GetEnvironmentVariableW
TryEnterCriticalSection
CompareStringW
MulDiv

Sections

CODE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ