62b30982f6426c5550ec946832277f91_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62b30982f6426c5550ec946832277f91_JaffaCakes118
Size

1.1MB
MD5

62b30982f6426c5550ec946832277f91
SHA1

2f9bc52ba8fc89aaa03f93c09cde3399a5354290
SHA256

2fec7505f58cd2a04ce21ec093ad3a6a818c54ff46f6c57bef44fcc192ef5019
SHA512

7fe026b12db264fed15d5b3181f1eb98f7cbece144250827befaebd941cd7e218a0eaa24a5d4e90bf78148df1c3739eeb1005e14f1a83cd96003ba87cc021a7b
SSDEEP

3072:1jtiSeR+sqTkrpbHLF7QAzXBe5AwU4bAvlCpDJqNwuy+ndOBrTR1UM1pKxFOWm/a:htiSeRTqglbmYeJAsbq12fRcFOWp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62b30982f6426c5550ec946832277f91_JaffaCakes118

Files

62b30982f6426c5550ec946832277f91_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1bcbe31ac6138151bbf5b5ec3273f9af

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLCID
GetSystemDefaultLangID
GetVersion
GetModuleHandleW
GetCurrentProcessId
GetModuleHandleA
GetCommandLineA
GetLastError
GetTickCount
GetUserDefaultLCID
GetUserDefaultLangID
GetCurrentProcess
GetCurrentThread
GetCommandLineW
HeapAlloc
GetProcessHeap
LeaveCriticalSection
GlobalLock
GetProcAddress
CreateFileMappingA
Sleep
GetWindowsDirectoryA
LoadLibraryW
CreateEventA

Sections

.text
Size: 332KB - Virtual size: 332KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 718B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 784KB - Virtual size: 783KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ