8bce2d5c61e54b761a976b0df68aeb65_JaffaCakes118 | Triage

Sharing

General

Target

8bce2d5c61e54b761a976b0df68aeb65_JaffaCakes118
Size

52KB
MD5

8bce2d5c61e54b761a976b0df68aeb65
SHA1

6dee3fadf73e91591d4d08dadbac9467a4051fe5
SHA256

a03a957631d53e363aef6fb1b8b91563a1246da0584def7af7c3572bfc732fc5
SHA512

627a083cf5734366e865c89a0174701f065dbea5469a2846ead63202d6a677e40f992191f9b74facd67a4ee2e7f19c3883342b0f600864380ab690acffaaa65d
SSDEEP

768:qVG1r+llsVmeTsIk3Yp93KrzF8kht4IWDRe5bBvbMk52iCBDY3RuWWKhvW4:qV+SlskEasyzFdhtID+54k7JuW50

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bce2d5c61e54b761a976b0df68aeb65_JaffaCakes118

Files

8bce2d5c61e54b761a976b0df68aeb65_JaffaCakes118
.exe windows:4 windows x86 arch:x86

17ac1c8a533312daecee1a18a5ec137a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
InterlockedExchange
Sleep
InterlockedCompareExchange
HeapFree
RtlUnwind
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
HeapAlloc
SetLastError
UnmapViewOfFile
SetFileTime
GetFileSize
GetFileTime
CloseHandle
CreateFileA
MapViewOfFile
CreateFileMappingA
SetEndOfFile
SetFilePointer
HeapDestroy
SetErrorMode
LoadLibraryA
GetModuleFileNameA
GetProcAddress
DeleteFileA
GetLastError
ExitThread
GetProcessHeap
EnumDateFormatsExA
ReplaceFileW

Sections

.code_01
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ