619a2a7aa15265e1b02ee56f624de8e9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

619a2a7aa15265e1b02ee56f624de8e9_JaffaCakes118
Size

168KB
MD5

619a2a7aa15265e1b02ee56f624de8e9
SHA1

5edc6e1615709b637e046c1836b2e5a1f93996d4
SHA256

6e0bec7a6d63491bf61d1c3579b01f69da83909f3548821eca022573380cd14d
SHA512

d27ddcd2b2335256a8589474539d5d4684ad54e3e962ccaa5e57973d33d48e83be08fbcec60597fb151772011ee04028e51cba904be40f3c4f328faa248140cb
SSDEEP

3072:IzVJ4rbb/XvcnchiQ36FU9bZeVnfWQaQQeWZX452HnZsLWuu:ZnLUncwOHZeVn+Vv1lFaLJu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
619a2a7aa15265e1b02ee56f624de8e9_JaffaCakes118

Files

619a2a7aa15265e1b02ee56f624de8e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

22aa25a9dbb99211db866b1a30897dd8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
GetModuleHandleA
GetFileSize
FlushInstructionCache
GetTickCount
VirtualProtect
GetLastError
GetProcAddress
LocalFree
LoadLibraryA
Sleep
LocalAlloc
ReadFile
VirtualProtect

user32

wsprintfA
wvsprintfA

Sections

%.:=/n0`
Size: - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

dJS\ef)"
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

j'`%=yHV
Size: - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

O7'=muc=
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

;?Es>d(D
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE