7922bf8f9662fc53199465a0fc89d5ea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7922bf8f9662fc53199465a0fc89d5ea_JaffaCakes118
Size

279KB
MD5

7922bf8f9662fc53199465a0fc89d5ea
SHA1

5769f2eb87c6b61ae3498994c5b8ebeb125e1e65
SHA256

657c232ca73750bd21700e1b26d01e796bae19c45d1c5e6aba3c894436a41b6b
SHA512

834ecd8db4d54cf823a6b22b8807f876d8f7a0176b17e08864c0eaae303126ba1f36c8c6496b74e61ad096cf51cd5c8e06ccad57f6b0330358703704b2cd462d
SSDEEP

6144:j7GuQuAwqycdcsn0emkOgs6D0e2J3J1GMuZpy2zf837AX2Vo:fGxCq6m0gOgge03uZpxzU7T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7922bf8f9662fc53199465a0fc89d5ea_JaffaCakes118

Files

7922bf8f9662fc53199465a0fc89d5ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

befca3da4302e7f34cc4cda8644a7b8d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
IsValidLocale
ExitProcess
TlsGetValue
ResetEvent
GetProcAddress
VirtualProtect
SetEvent

Sections

.text
Size: 197KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 77KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 190B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ