88fe305bbf9afcad59021e4a714cab40_JaffaCakes118 | Triage

Sharing

General

Target

88fe305bbf9afcad59021e4a714cab40_JaffaCakes118
Size

140KB
MD5

88fe305bbf9afcad59021e4a714cab40
SHA1

43a35d8e7690d90eb06a5b0ee860c901ccab667f
SHA256

a42d9fd7e8e5c69fc70ca8079f001ef28aecb582817329f58147f033e82cf314
SHA512

4e02f926fae7cf83e3fe0a289c10055ee03a0f435b90d13b88fcea5e69dee78d59ffdfffd58b16d46c89128eaed0648dd54c3fbf56ed35072d9927b0df56aecc
SSDEEP

3072:UJUv62uGoN4z7f5OU+0W5K8lCmbDH6RifHx9qKuX96Vt197:Ni2uGzzjZ+0bvmbDaROI/6Vt1h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88fe305bbf9afcad59021e4a714cab40_JaffaCakes118

Files

88fe305bbf9afcad59021e4a714cab40_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0879751f989d85c88563aa9547a8d3ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
FindResourceExA
GetProcAddress
VirtualAllocEx
WaitForMultipleObjects
GetModuleHandleA
CloseHandle
CreateThread
TerminateProcess
GetCurrentProcess
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetTickCount
HeapFree
HeapAlloc
GetStartupInfoA
GetCommandLineA
ExitProcess
GetProcessHeap

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE