82a51785c2bb22f64b3021ce184692ee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

82a51785c2bb22f64b3021ce184692ee_JaffaCakes118
Size

348KB
MD5

82a51785c2bb22f64b3021ce184692ee
SHA1

ef4a7bbc08825bebf348a56ec2f48ce77d0b498d
SHA256

f8f08443ec4ca358db9955c2addf6b9927a7c5b3fe2bf2982c327f6c6428fc7a
SHA512

1781ffbb8f7bd15df9e047bf42fc033a072613a36290c40cd338cc97cdbec2e13579f7b35f878187457ccd17a00160a527ce7057251b9b171af55eb5b0a70f45
SSDEEP

6144:uZ8xniOnVohlkSSVRwVo0yW8HoWA9xaJVE/ykkypqvOnRY45b:uZ8x7Vonk1RY7KovaJV80y4vOnRY45b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82a51785c2bb22f64b3021ce184692ee_JaffaCakes118

Files

82a51785c2bb22f64b3021ce184692ee_JaffaCakes118
.exe windows:1 windows x86 arch:x86

92009019dee90696f2364d47b68ae436

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessInternalW
CreateFileW
ExitProcess
GetFileSize
GetModuleFileNameW
GetThreadContext
GlobalAlloc
ReadFile
ResumeThread
VirtualAllocEx

ntdll

NtSetContextThread
NtWriteVirtualMemory
ZwUnmapViewOfSection

Sections

.text
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 344KB - Virtual size: 42B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE