3357433e2de749c2af0b76f699be9dda_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3357433e2de749c2af0b76f699be9dda_JaffaCakes118
Size

186KB
MD5

3357433e2de749c2af0b76f699be9dda
SHA1

3e9235069acce0f7a872f3ebac62515583d513ba
SHA256

1b819dbb160b18ea6a145830ddee84fee5b074577b6410ef373c070468247785
SHA512

f72cd0aaaa2a70d3549c00be0ad0040fcaba60946091948af271823f55709a320684417e459895f62e78e4ed2ea563f874d4ca4d77b3fce8a24b6b2a498194f7
SSDEEP

3072:89Yi7bzXxPLKimM5CqrTD0DcSAGxq69R4essgfXx4oUuNHHn+LcY5:JirJbmM5P/D0QGg8hsPx4oRNn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3357433e2de749c2af0b76f699be9dda_JaffaCakes118

Files

3357433e2de749c2af0b76f699be9dda_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4e9a2b727dfa57f064bb3d1995b4d2d7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetProcessPriorityBoost
TerminateThread
ReadFile
Sleep
GlobalLock
CreateFileW
WriteFile
EnumResourceTypesA
GetModuleFileNameW
CreateProcessW
CreateEventW
GlobalAlloc
GetModuleHandleW
InterlockedDecrement
DeleteCriticalSection
GlobalUnlock

imm32

ImmAssociateContext

ole32

GetHGlobalFromILockBytes
CoTaskMemFree
StringFromGUID2

Sections

.text
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ