82e2a57b17f845e39e579da66e921737_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

82e2a57b17f845e39e579da66e921737_JaffaCakes118
Size

219KB
MD5

82e2a57b17f845e39e579da66e921737
SHA1

a27f95f0366826d73c9b15fb237a0869692035b7
SHA256

a3eea9efef3eb066aaac8f98332bc0865212fe19d6611299f359e1d68cfef71f
SHA512

41269053fda319e6d296c5be025c75d96d47ffc7a0f6831d9b697238e4de786f2a628095aa793bf58935d746dedbf68628ae982240066032392aebdf70ed8f9f
SSDEEP

3072:ADfOaYaiyTaMSsDyLvE0nsrbPHeL5GIT1KwMAhK/Mc4vpODH6OsixrR3U5KyURlJ:0OWxal9L0rbO5zVg/Mc4vpKprrF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82e2a57b17f845e39e579da66e921737_JaffaCakes118

Files

82e2a57b17f845e39e579da66e921737_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9b86f94b7e933a7f51ea089c5ed02fd5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleA
GetProcessHeap
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
VirtualAlloc
VirtualFree

user32

GetGuiResources

Sections

.text
Size: 1024B - Virtual size: 862B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 213KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ