492125991f356932901fc9df2396eef1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

492125991f356932901fc9df2396eef1_JaffaCakes118
Size

328KB
MD5

492125991f356932901fc9df2396eef1
SHA1

1606dc6e45954bfeaefee2e3e61a70e393923a58
SHA256

1b3a89eb543026cf2024f43e9bb331562ceab6584722473f1d42a31f480ebacc
SHA512

7178290622019d3ec2d56beaff56782faa6f06dd5776c3903d2949c91d171d48c8c9b767dc5fdb62363f2dd5d6087cd050c9348cddaf328812973e157c0401ff
SSDEEP

6144:03+a9t2dKDDy+EOuuaSshoHcSZtTD+VqZdivZrjJpbQfJxW/fGsb1PSNwDok:CP9t2Y3y+ErXDoHcSzT+ZrjJpbMirPdv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
492125991f356932901fc9df2396eef1_JaffaCakes118

Files

492125991f356932901fc9df2396eef1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8c73d8af4df2d3a65fb466e92f88813d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

QueryPerformanceCounter
LoadLibraryA
GetProcAddress
GetCurrentThreadId
LoadLibraryW
GetStartupInfoW
GetCurrentProcessId
GetModuleHandleW
VirtualAlloc
GetTickCount
GetSystemTimeAsFileTime

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 136KB - Virtual size: 560KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ