8a49c1c1dfd7b8c8f36b8652773eb9a4_JaffaCakes118 | Triage

Sharing

General

Target

8a49c1c1dfd7b8c8f36b8652773eb9a4_JaffaCakes118
Size

210KB
MD5

8a49c1c1dfd7b8c8f36b8652773eb9a4
SHA1

567e3fbf584a019a52d35e116304914ebcf916e7
SHA256

9278f8b6044e5fc42bef2525aebe5fc00a4411d159da379e653203e42a52569e
SHA512

05e9e702aaf5a629af49a1e3c410442552b527e19f1f528854222201e0d0ddc354b8ced59e33a2a85cc16e52546a4cfbb01dda3ea0a2d5d0b0f5d00ee52523e0
SSDEEP

3072:QuzvtYiHCBx4LSrsFCLirDjCWhNHEI6WhJ9l7zrXLlt7PI:DzFD9LSrsFRjDhuI647zN5w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a49c1c1dfd7b8c8f36b8652773eb9a4_JaffaCakes118

Files

8a49c1c1dfd7b8c8f36b8652773eb9a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

da7ab599245f7924eda04048402a69c7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
GetLastError
GetModuleHandleA
_lclose
_lread
_lopen
GlobalAlloc
GetSystemTime
GetModuleFileNameA
Sleep
CreateThread
GetProcAddress
LoadLibraryA

user32

GetWindowRect

Sections

.text
Size: 4KB - Virtual size: 1005B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ