6a2076ed421b2ccfa0f8e8d7dfd053dc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a2076ed421b2ccfa0f8e8d7dfd053dc_JaffaCakes118
Size

121KB
MD5

6a2076ed421b2ccfa0f8e8d7dfd053dc
SHA1

8b31ea7be7dd2991d07cfdcd67ccc8880d4fab32
SHA256

0588b4491eb90783c8bdd0ab45920dcd6d9e7098f4efddcdb1f87b7bc45c660c
SHA512

f9995f637c9d4cd1d6c0e0cf4a102ecc27e71a97601c49b84db6056ddfb2f5e0434c1bb93a0e0376f737c99166f8eaab5ada919cf6a98fbaf7b1ff5612c03c2d
SSDEEP

3072:vCr0d+QI1gjw5TkFfjgUUNgX7L9kIRHBKxZ1:ime8//rL9HR4T1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a2076ed421b2ccfa0f8e8d7dfd053dc_JaffaCakes118

Files

6a2076ed421b2ccfa0f8e8d7dfd053dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0be9fe659962311bca7a0a4c46bea1d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject
CreateStdAccessibleObject

kernel32

InitializeCriticalSection
Sleep
CloseHandle
LeaveCriticalSection
GetThreadPriority
ReadFile
FreeEnvironmentStringsA
CreateThread
GetLocalTime
SetEvent
CreateSemaphoreA
GetStartupInfoA
WriteFile
GetDriveTypeW
ReleaseSemaphore
FindClose
EnumResourceNamesA
EnterCriticalSection
SetEndOfFile
WaitForMultipleObjects
GetLastError
ExitProcess
DeleteCriticalSection
CreateEventA
WaitForSingleObject
GetSystemTimeAsFileTime
FindFirstFileW
SetFilePointer
LoadLibraryA

Sections

.text
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ