5c50e84192bf58859e1d0aae5e998d97_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c50e84192bf58859e1d0aae5e998d97_JaffaCakes118
Size

99KB
MD5

5c50e84192bf58859e1d0aae5e998d97
SHA1

d764b9fbace7255c37bd36e70fb44975a12b37a8
SHA256

271af36cbb689cfc2fa72b615f8b81f322c676376f39034ceb5f38d1ebc9b433
SHA512

721dcd34ba5d25ab91160e4330a375b01a3df0399a12dffd845f1b91314b60587cb59704780b122e64187206831d15edb27c8819f300cc24dfcd52d2960917f6
SSDEEP

1536:mULK2SOgMxR8dcNCdc/qaE9Op9n2LFFNjIHcnw94F6sKbCHg+/yv6bXou:N9SOgqDBqa2on2LbW8nw9AKbCxg6b4u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c50e84192bf58859e1d0aae5e998d97_JaffaCakes118

Files

5c50e84192bf58859e1d0aae5e998d97_JaffaCakes118
.exe windows:4 windows x86 arch:x86

992a2402ed71552afd054a6b5930d45f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseSemaphore
lstrcpyn
CreateSemaphoreA
GetTickCount
MulDiv
VirtualAlloc
UnhandledExceptionFilter
SignalObjectAndWait
HeapReAlloc
InitializeCriticalSectionAndSpinCount
CancelWaitableTimer
CreateMutexA
LockResource
SetLastError
DuplicateHandle
GetModuleHandleW
CreateSemaphoreW
lstrcpyA
GetNumberFormatW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 514B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ