84ceea2abd602b6529db1b74e12b27ca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

84ceea2abd602b6529db1b74e12b27ca_JaffaCakes118
Size

47KB
MD5

84ceea2abd602b6529db1b74e12b27ca
SHA1

cc86ea76626a5e9fb964d45dd51ae1662c38c2d9
SHA256

806519c9f9d43cc38f8765d236a26a9dd85aeaeb23e1be9f9b35190fa49b0806
SHA512

7b79f089bc4bf2fe23ccaf80779dc6555d754cd4cd6a852efdee24a12e3a8df00d364d368a313c8b959609f023d8e11043abe3ff38934982d1eafa9a0e39a47a
SSDEEP

768:FCPmZdHFSLdD+6JXaEXbjk30dgT7+WbyfbL/+9Gx+:FC+nFSLd/Jdrdgzbum9G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84ceea2abd602b6529db1b74e12b27ca_JaffaCakes118

Files

84ceea2abd602b6529db1b74e12b27ca_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ea9cfb33d288d3d167ab1eff37f2b60d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
HeapSetInformation
FindClose
FindFirstFileW
lstrcmpW
FoldStringW
GetCurrentProcessId
GetCommandLineW
MulDiv
GetFullPathNameW
LocalSize
GetLastError
WriteFile
SetLastError
WideCharToMultiByte
SetEndOfFile
LocalReAlloc
GetFileInformationByHandle
HeapAlloc
HeapFree
GetTimeFormatW
GetEnvironmentVariableA
CloseHandle
CreateFileA
lstrcatA
GetWindowsDirectoryA
GetModuleHandleA
GetStartupInfoA

Sections

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ