182a8536c740eebae23e4a676485318f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

182a8536c740eebae23e4a676485318f_JaffaCakes118
Size

56KB
MD5

182a8536c740eebae23e4a676485318f
SHA1

da11e6a2d61bffc6441c3b762553431f00c416b1
SHA256

af33c115baaad8abfc0919180c9003099d8e4fc037fd27a4a5b60cb54690a004
SHA512

801ed430a9283724e4a1f202459d00ad449a15e764e89c34e3a8c864412e25e26b1591d9207f1a15d75b68a7148ceb673d6f13c1b6ee5d2677e14d0f22e8b6c9
SSDEEP

1536:3GMA03owZJ73hACKfHc5P603RpPLDhw7WARLMC4F:2MTBZ9hZ2s603RRLtGLMBF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
182a8536c740eebae23e4a676485318f_JaffaCakes118

Files

182a8536c740eebae23e4a676485318f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2c8c4a2dfee0dd4be2bcb767cf0769bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadPriority
GetFileInformationByHandle
DelayLoadFailureHook
GetFileAttributesW
ActivateActCtx
EnumSystemLocalesW
ConvertFiberToThread
GetCommTimeouts
SetThreadLocale
SetConsolePalette

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE