4d5ba9f87b59d6d783527d54fe8f6733_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d5ba9f87b59d6d783527d54fe8f6733_JaffaCakes118
Size

324KB
MD5

4d5ba9f87b59d6d783527d54fe8f6733
SHA1

12841e589040eb2d46533570bf87adda599a83ca
SHA256

1d9254bbac6aa7bc5715a1de8f2d78654c0b432c75c1d7ac1acf0a57fbc8f17c
SHA512

519eb885e739990ae67878533b14c1ae224fa2e4624ec276207c3e6c7ca74a2d06c6cacb8f87e51160506da33f830abada7aa4b1f6259ff6c22839ddf3ef9381
SSDEEP

6144:P7h3p5XuCt7+kBkRlfrTbJ/hC9CS57X96p4Acpl4fvAlhs3DXbm:PF3p5Xug6kBkHTHJMES57wCAsKAHkDXK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d5ba9f87b59d6d783527d54fe8f6733_JaffaCakes118

Files

4d5ba9f87b59d6d783527d54fe8f6733_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3d74c36cde6acaf008f30a2d6bf908be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetCurrentProcessId
VirtualAlloc
GetStartupInfoW
GetProcAddress
GetCurrentThreadId
GetSystemTimeAsFileTime
LoadLibraryW
GetModuleHandleW
QueryPerformanceCounter
GetTickCount
LoadLibraryA

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 150KB - Virtual size: 560KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ