48508b7a2796eeeea352d04efdd15ce3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48508b7a2796eeeea352d04efdd15ce3_JaffaCakes118
Size

287KB
MD5

48508b7a2796eeeea352d04efdd15ce3
SHA1

c50e37b6641ce2427ac098930049938c0ad1dd02
SHA256

182a5e5e1f96cdd9dc01c4fcd0e9aa1533f1855ceab0604d3c008c59d0d2d074
SHA512

ab8006e75ee3c348fd92af3a1fd141c1ea7896b8a0755b92bfe2251c98cd405caf00ade7e26503ae2ebe5f06808ed3fb1d163c83aec0e3f4ee110f87858126ce
SSDEEP

6144:XAOTPIFKP/S5v4IAouDLxiejgTrrNwkQQit:XkeldBDLrQvTQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48508b7a2796eeeea352d04efdd15ce3_JaffaCakes118

Files

48508b7a2796eeeea352d04efdd15ce3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b195aba2422ee61afa8e0389db48f613

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateEventA
CreateProcessA
CreateThread
EnterCriticalSection
ExitThread
GetSystemDirectoryA
GetTickCount
GlobalAlloc
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LocalSize
OpenEventA
SetEvent
SetFilePointer
Sleep
WaitForSingleObject
WriteConsoleA
lstrcatA
lstrcmpA
lstrlenA

user32

EqualRect
GetClientRect
GetMenuDefaultItem
InflateRect
KillTimer
UnregisterHotKey
ClientToScreen

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 273KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ