82eda66553f551a66cc9426ce5a6b319_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

82eda66553f551a66cc9426ce5a6b319_JaffaCakes118
Size

68KB
MD5

82eda66553f551a66cc9426ce5a6b319
SHA1

8d0fd8b54394b818a5685f023acce5b0b24adcbf
SHA256

435797d090340699c4bebb16973d26042cc023a62d456a16e259e8be57a683c0
SHA512

b1cf586709a0c25e09bf329308e89f2f6fdec14cc63786f1d0704f6930a63b11cc9fd6ec2db997851b663721d22e1c0b5983e8e5859c8db76493345ee9a1bae8
SSDEEP

1536:NMHxCzf+9oIKPZygrf/OFI8+C9SRzO/80nvo1C4I31oIRzy0:329puZygbOX+CwRi5vmCR3zRzy0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82eda66553f551a66cc9426ce5a6b319_JaffaCakes118

Files

82eda66553f551a66cc9426ce5a6b319_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ca0285ff19034c98eca8e2d51b9c358c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ExitProcess
GetCommandLineA
GetModuleHandleA
GetVersionExA
HeapAlloc
HeapCreate
IsValidCodePage
SetConsoleCtrlHandler

advapi32

QueryRecoveryAgentsOnEncryptedFile
GetEventLogInformation

setupapi

SetupDiGetClassImageListExW
SetupRemoveFromSourceListW
SetupSetDirectoryIdA

user32

SendMessageTimeoutW

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ