1833939bb4a17d73f1809783e0acd8a9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1833939bb4a17d73f1809783e0acd8a9_JaffaCakes118
Size

1.0MB
MD5

1833939bb4a17d73f1809783e0acd8a9
SHA1

b971cb8962480e17574d006ae71a4bad2cfea102
SHA256

892fe41ee9e1d9b5fb55f8614dfdce5b8eab7753635de644d096a5d67b94fbca
SHA512

57360371f8852ac3f246c7c946cced1ddadc1670a2dc3a3be163643a467886a03975d3e9f5a747ab99d30deca0a126338e3c781052b10697a4644b6f45c09b7d
SSDEEP

24576:5eUcTKO2+I9zWDOiy3gwPzqHFOYgvERYsbchSn1Esxu4FN0:5zcKWI5Ogzqmcusn1/ouN0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1833939bb4a17d73f1809783e0acd8a9_JaffaCakes118

Files

1833939bb4a17d73f1809783e0acd8a9_JaffaCakes118
.exe windows:1 windows x86 arch:x86

042c9b1b322112c2023beac06156bc2d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetCurrentThreadId
VirtualFree
CreateFileA
ExitProcess
SwitchToThread
SetThreadExecutionState
HeapQueryInformation
GetSystemTime
SetThreadAffinityMask
CreateThread
GetFileTime
SetHandleInformation
UnmapViewOfFile
MapViewOfFile
ReadFile
HeapFree
HeapLock
GetThreadPriorityBoost
OpenThread
LocalFree
CreateMutexA
HeapAlloc
GetThreadContext
GetThreadLocale
HeapSummary
GetHandleInformation
GetSystemTimeAdjustment
GetCurrentThread
SetThreadPriority
GetSystemTimeAsFileTime
HeapCreate
SetThreadIdealProcessor
HeapDestroy
CloseHandle
SetFilePointer
VirtualAlloc
CreateFileMappingA
GetThreadPriority
TerminateThread
HeapSetInformation

Sections

.text
Size: 914KB - Virtual size: 913KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrcs
Size: 15KB - Virtual size: 496KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ