82c5badc5e36e4446a7f93010cf6dfa7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

82c5badc5e36e4446a7f93010cf6dfa7_JaffaCakes118
Size

277KB
MD5

82c5badc5e36e4446a7f93010cf6dfa7
SHA1

a7fb6465c891bf04678d1e44e0cfc6488369ac50
SHA256

207167a86aa33dd0eca693bc23ea25e1a0ca273fba86465551b12f6f6899af36
SHA512

bbfe8dc3676ece1ed3ca7d1c6dbdae9ee83fe3c52bade160259922e0871524c8263c6e4ff135835cee9794378a4c5ba76e0045e540aceac700b9b36785c520cd
SSDEEP

6144:PY8UQJR4i6IvOEI661gaHMQuxjJz7d2FNSZgojelRw:AGNZ2lMqNOHMR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82c5badc5e36e4446a7f93010cf6dfa7_JaffaCakes118

Files

82c5badc5e36e4446a7f93010cf6dfa7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58bfc8200d483ba668d371a05aea94c9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateEventA
CreateThread
EnterCriticalSection
ExitThread
FindFirstFileA
GetTickCount
GlobalAlloc
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LocalAlloc
SetEvent
SetFilePointer
Sleep
TerminateProcess
WaitForSingleObject
WriteConsoleA
lstrlenA

user32

RegisterClassExW
TrackPopupMenu
GetParent

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 650B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 263KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ