82a14f93d9350a0a91a15feb1564ced3_JaffaCakes118 | Triage

Sharing

General

Target

82a14f93d9350a0a91a15feb1564ced3_JaffaCakes118
Size

73KB
MD5

82a14f93d9350a0a91a15feb1564ced3
SHA1

202f077885d7f1a6dff42d92a362f5158d83fc6f
SHA256

57ee8b9b7da6d1034956b82b8655c4bddb3831067e364e9669c9cc3578756a19
SHA512

72de0a91d17ea7d7c3a5ab75c2c9a362a0d6f4923569008c58b535ed701eddca52a530c8fb55329220d553813071eb939dcabd2d821b72c3a6ede7240efde2cb
SSDEEP

1536:4GpuwF5CmcRGHSiFrCKm0+xx5fIO8kKxlEbq2e/sFcDh5Zjpj1:PpymcRCt4xxlpClEjKpj1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82a14f93d9350a0a91a15feb1564ced3_JaffaCakes118

Files

82a14f93d9350a0a91a15feb1564ced3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

61597ffc3eb9f12ccff061cc20a15ea9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCommandLineA
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessId
GetVersion
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
VirtualProtect

Sections

.text
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 61KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ