84868a422375757498c25e9130d9a5a3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

84868a422375757498c25e9130d9a5a3_JaffaCakes118
Size

112KB
MD5

84868a422375757498c25e9130d9a5a3
SHA1

09e4263ade4b7a7c5a5e3b01598ee8d8e63a1af8
SHA256

80c7a87515f3285f0640a0d0de3a2366b07e39926a0c3767fc7986fbc725986f
SHA512

f4e33474b9c81ae6203d834665b6ae1bac3547739c431429adc7a8e3e02e7b09f543e398d56e9d8c6bdfb04b810a12b4ac13e9c5d166a848929607f5418a930b
SSDEEP

3072:RdARIRJr1aT5+DdsMqolFFFk8jwaaHw7Koj4rYZt2lOVm6:rAgJxad+DeMbZtCO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84868a422375757498c25e9130d9a5a3_JaffaCakes118

Files

84868a422375757498c25e9130d9a5a3_JaffaCakes118
.exe windows:65535 windows x86 arch:x86

6b74478f56b029d48a46fad01a124517

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CreateFileA
VirtualProtect
GlobalAlloc
VirtualAlloc
GetTimeFormatA

msvcrt

_adjust_fdiv
_initterm
__p__fmode
_except_handler3
__set_app_type
__setusermatherr
__p__commode

Sections

.text
Size: 60KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE