779d13e40bc3cbf5c56ec4c9eaed903f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

779d13e40bc3cbf5c56ec4c9eaed903f_JaffaCakes118
Size

69KB
MD5

779d13e40bc3cbf5c56ec4c9eaed903f
SHA1

e4d2ea3fa9f432abf310e9219d23ccf24ff124be
SHA256

f43c72b6ec1c6623c8da12c44b0068d6975db6cdd6cf20c9dc803d3e8715b98a
SHA512

521888cbbad57988b13828af9010a30a45aaa3d4e0a46db96ebd27f32a0b0c1ca941dc91e92bd4c16799b28099523a2e47bba1fafc55a8c32afa59fdda089702
SSDEEP

1536:Ly+jXwrqAy9OlQPHniUcbmhd2vXF47FRegk:LxaqWpU+V47Cz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
779d13e40bc3cbf5c56ec4c9eaed903f_JaffaCakes118

Files

779d13e40bc3cbf5c56ec4c9eaed903f_JaffaCakes118
.exe windows:3 windows x86 arch:x86

4242bb82803a0e8123ca64eb689cf913

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateEventA
CreateThread
EnterCriticalSection
GetCurrentThreadId
GetProcAddress
GetTickCount
HeapAlloc
HeapDestroy
HeapFree
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
LoadLibraryA
LocalFree
QueryPerformanceCounter
ReadFile
Sleep
VirtualAlloc
lstrcmpiA

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ