81fdb106946120909132e8b461638459_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

81fdb106946120909132e8b461638459_JaffaCakes118
Size

137KB
MD5

81fdb106946120909132e8b461638459
SHA1

524b333dc65f3c72078b2dd9c1cbb7b377c42716
SHA256

7b912e40a9eb3c1b9c05104c709f73389bd547fca7ec8488179e2248a55c478f
SHA512

9ad0c6a1c01920674ee90477b499a8423d9a36dbcf8075b4e6b68ae36701fec0c6f2ce492ddc6f5740d109ba765dec30d24972755d78ef0c807b0aec9e9b85f9
SSDEEP

3072:lrz9TPSXSCvv7acMSgpyMnQnOiZuBlW9Oyi:Rz9rSieacMSgpy9nOxE0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81fdb106946120909132e8b461638459_JaffaCakes118

Files

81fdb106946120909132e8b461638459_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7756f274b323bce82e17a0d440c839b4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
GetModuleHandleA
_lclose
_lread
_lopen
GlobalAlloc
GetSystemTime
GetModuleFileNameA
Sleep
CreateThread
GetProcAddress
LoadLibraryA

Sections

.text
Size: 4KB - Virtual size: 637B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ