186289681118b2e422babea77d2b83d9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

186289681118b2e422babea77d2b83d9_JaffaCakes118
Size

109KB
MD5

186289681118b2e422babea77d2b83d9
SHA1

483fcf6c86f34249283a8f58a4f25700c8aec546
SHA256

aa42191bd18cb6f98c9b5324d053ed40bf27c12396078891d9a70a2764802ee1
SHA512

9457affaebe567426de8c044bc3f48516d71d8e32b6219e8244c2cab5b69246bfdcafb94d0c85108a78e94e6fa2eec08ac35dd652d2017e8600af8460ecfe9b6
SSDEEP

3072:ZZfYO7p820efPp12eVH4CL9NVnkXHuQS/AgGgTQ:ZVh7p820kKeIuQsGg0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
186289681118b2e422babea77d2b83d9_JaffaCakes118

Files

186289681118b2e422babea77d2b83d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

958ddfbe61f000bc42b0b3d5b6c5839b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateThread
ExitThread
FlushFileBuffers
GetCurrentThread
GetExitCodeThread
GetModuleHandleA
GetProcAddress
LoadLibraryA
ReadFile
Sleep
TerminateThread
VirtualAlloc
VirtualFree
VirtualProtect
WaitForMultipleObjects
WriteFile

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 514B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 218B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE