82b4796be79a70f99130cf02f91fc51b_JaffaCakes118 | Triage

Sharing

General

Target

82b4796be79a70f99130cf02f91fc51b_JaffaCakes118
Size

43KB
MD5

82b4796be79a70f99130cf02f91fc51b
SHA1

81e3059ddeb82ee4eb6d9767a12a1a4e806be093
SHA256

3a1b09e773005e0600d712a798b66feec4d3413e28c6ed1672ce1ddd400ce54a
SHA512

51468a04ce9fdab4fa93e5a9179fe07ded526fd0b69411999ee1a2259bd717965364385f40749699a3d27e81cbdd895631aca6e1ad934153a70afe60a92c6642
SSDEEP

768:OjP0SANrdG52sb+yf9v5ry/d6tiraFw1OTSo6Z4MHXr/Uv:i0ZKb+oy/kdXMZdXr/Uv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82b4796be79a70f99130cf02f91fc51b_JaffaCakes118

Files

82b4796be79a70f99130cf02f91fc51b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

be963b0a42606df520d3252490308297

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalLock
GetSystemTime
HeapFree
ExpandEnvironmentStringsW
GetModuleHandleA
UnmapViewOfFile
SetFileAttributesW
HeapAlloc
FindFirstFileW
SetThreadPriority
FlushFileBuffers
GetTimeZoneInformation
SetLastError
GetUserDefaultUILanguage
SetFileTime
GetTempPathW
OpenProcess
lstrcmpiA
SetEndOfFile
CreateEventW
GetSystemTimeAsFileTime
DisconnectNamedPipe
CloseHandle
GetCommandLineA
EnterCriticalSection
MoveFileExW
lstrlenA
GetDriveTypeW
SetEvent
lstrcpynW
GetModuleFileNameA

user32

GetWindowTextW
ExitWindowsEx
GetWindowLongW

Sections

.wvat
Size: 35KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tuvwv
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.etyza
Size: 4KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ