308af943c5a417e25b83c479fa9b4530_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

308af943c5a417e25b83c479fa9b4530_JaffaCakes118
Size

96KB
MD5

308af943c5a417e25b83c479fa9b4530
SHA1

d92ca534c540919a8d6df0d6ec7acb36d78bf5dd
SHA256

fc552be6175c46b4e824cddebb17163df4484e7087dcb4bf2a3d81c233c3c8aa
SHA512

0e532c1fd778306027830c8b6b449a525540360ffdfbdc768daffb4b72434ca61af95c0be31eb8221bf26effd8087e20b4ac63b69883318f65b415c9d8e1141c
SSDEEP

1536:jM1w+C54KtNHPZvlGtMzAngcG49yfm7aMufC+mdrLaoarEZdfX04qRH:jMC+C54KtFPjnzAgB1+HuY3a3rEZd1q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
308af943c5a417e25b83c479fa9b4530_JaffaCakes118

Files

308af943c5a417e25b83c479fa9b4530_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1672702476465165c595957a66d94b47

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
VirtualLock
CreateTimerQueueTimer
GlobalAddAtomA
LockFileEx
SetUnhandledExceptionFilter
SetCommBreak
VirtualFree
GlobalReAlloc
GetStartupInfoA
ExitProcess

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

WEIJUNLI
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ