228bc61b0e9a03f2353909f256698043_JaffaCakes118 | Triage

Sharing

General

Target

228bc61b0e9a03f2353909f256698043_JaffaCakes118
Size

62KB
MD5

228bc61b0e9a03f2353909f256698043
SHA1

984933e2e0d2157215bd57c0e39f82ccd057e11c
SHA256

f1ab398e0c509d7e53b516c9d459f82d00bc5930893a99dbd2327fff5a7f4021
SHA512

4cf621be0902395662f93583c528f343d92e461296b9a4de7c0bc8b031b1ee7ec54363b799f6710f9d6f696acfb22f2087aa0608cb0b5befcec652bd649be232
SSDEEP

1536:jqzz/AXcgQYBMsLne37/7tiPSfjHOFT5E8Sfr:GMrBMsje3b7tZbupxSj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
228bc61b0e9a03f2353909f256698043_JaffaCakes118

Files

228bc61b0e9a03f2353909f256698043_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e798c3a4c15a3a1847e239484dd7ce79

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpA
LZStart
GetSystemTime
AddVectoredExceptionHandler
ReadConsoleW
CreateProcessInternalW
FindNextChangeNotification
CreateSemaphoreA
GetPrivateProfileStructA
QueryPerformanceFrequency

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE