473c9f020cb8fa84c4e03f01fe977f8f_JaffaCakes118 | Triage

Sharing

General

Target

473c9f020cb8fa84c4e03f01fe977f8f_JaffaCakes118
Size

91KB
MD5

473c9f020cb8fa84c4e03f01fe977f8f
SHA1

bf62bfe69d9e92855fe83d6e51009be886844e10
SHA256

d766b3aaa6793819eff75d6e8f5ace9ff4a3f70cd96f85763baba886e4615f32
SHA512

4ac8abe654ee38ffbcd4ab02887b090c81b9792f93fb9f43a9262b35b4e28f11de9ad160ed3b72cd147e91f804ea7ed23edd3080a87c96c1e31eed00230b97e0
SSDEEP

1536:GmYfFr0Z4n92nT4aljxb1rzhKhnBYrCqFkohS7VAhhro5G0Pe+46IFHmL8GKPp9z:vyhQnT429uFq9hSxeo5dP/oUCpdd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
473c9f020cb8fa84c4e03f01fe977f8f_JaffaCakes118

Files

473c9f020cb8fa84c4e03f01fe977f8f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

42e7c14ca48123966bb2bc209b151b7d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__osver
__p__winver
__toascii
__argc
__doserrno
__threadid

user32

MessageBoxA
MessageBeep

kernel32

CreateWaitableTimerW
CopyFileW
DeleteAtom
EnumCalendarInfoExW
DeleteFiber
FatalExit
CreateFiber
GetLastError

Sections

.text
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE