82402f550339093a9b4ea177039888c4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

82402f550339093a9b4ea177039888c4_JaffaCakes118
Size

83KB
MD5

82402f550339093a9b4ea177039888c4
SHA1

90223b956e9b424d43ed52b3828cc0589d8505a5
SHA256

b30ea9046e95a556d2c5dc5da973506ab4859b93504c504b78e8c6987038672b
SHA512

15e6b7d4cd7e720820fd2d0f94762e27c2d81e0b26c67e16663cd251a8950929f581da934d3b11c1faf984f90e7dac7dc78de047185fd881c626c8b62d0ed814
SSDEEP

1536:WCqlSAxyEGLkuvCVu+ocPiw4hlIhv5LkjAmeiY+cyTjEErxTWDTMqhGKYIZTET87:WCmSAgEGLQVu+5PinuYA6Y1yjBkMqhG4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82402f550339093a9b4ea177039888c4_JaffaCakes118

Files

82402f550339093a9b4ea177039888c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

13574f8ff1add75c3bfc23bfaa00f998

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceFrequency
IsBadWritePtr
GetNlsSectionName
GetThreadContext
EnumSystemLanguageGroupsW
GetDiskFreeSpaceExA
FatalAppExitA
GetProcessTimes
GetVolumeInformationW
GetPrivateProfileIntW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE