2162cd2cea76b3013764e1400a181189_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2162cd2cea76b3013764e1400a181189_JaffaCakes118
Size

1.7MB
MD5

2162cd2cea76b3013764e1400a181189
SHA1

cb1562c84a6edf8cfe0884ca42d62e068de8463c
SHA256

843bf60fbebcfd3c6c5f2501513f038e408b77b517d3b048ecdce31876829806
SHA512

4cc5d86b8cdac405963f02625685f35ddeb215d8597faebc174843469766788a7428f21a9c4d73514c48cbe200828da05bf4203205900b60b0278481e4252433
SSDEEP

49152:DySZ7ixUBBwXd7bpyosFztnkb9qNMbTdJKnw:DyUixUBBwXd7bpjsFztnkb9qSTdJKnw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2162cd2cea76b3013764e1400a181189_JaffaCakes118

Files

2162cd2cea76b3013764e1400a181189_JaffaCakes118
.exe windows:4 windows x86 arch:x86

38544a30a5428a150ac54da7afba1817

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
WriteFileEx
MoveFileWithProgressA
DeleteTimerQueueEx
ReadFileEx
CreateTimerQueueTimer

user32

GetWindow
OpenClipboard

authz

AuthzInitializeContextFromSid

Sections

.text
Size: 688KB - Virtual size: 687KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 424KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 268KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ