85c6d9b78311bf582b65e7e5d970226c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85c6d9b78311bf582b65e7e5d970226c_JaffaCakes118
Size

65KB
MD5

85c6d9b78311bf582b65e7e5d970226c
SHA1

82028928e6cd2c4dc2997132535dd8e96fb05792
SHA256

44a0b8c7ba4536f7e266b6efe7d684230efcb67721020672c0be5fed94daa3d1
SHA512

d8c15eb999fcf6f9807ee51edc84e0ddd505258e1e790b06471a5ab9d36f68fd1750af074bce051fdd2e05d239f02662b34908bb76e4cb53c86ae0fa4a37904d
SSDEEP

1536:CbShwDL4zec5iFQ9uZq9SAp1FRh86dFos++HnfaApBzcwA:CAwDL4Ybs/1FQ6csP/aIzO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85c6d9b78311bf582b65e7e5d970226c_JaffaCakes118

Files

85c6d9b78311bf582b65e7e5d970226c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c468e4899c536145201df042005d74a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
DeviceIoControl
CreateFileA
GetVersion
GetTickCount
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
GetSystemTimeAsFileTime

msvcrt

_getch
sscanf
_c_exit
_exit
_XcptFilter
_cexit
exit
fopen
__getmainargs
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_initterm
fwrite
fclose
printf
__initenv

haspms32

hasp

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ