939dd261f9cf3958df53b1f5a00354f2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

939dd261f9cf3958df53b1f5a00354f2_JaffaCakes118
Size

230KB
MD5

939dd261f9cf3958df53b1f5a00354f2
SHA1

dfc6f2d2f63ef3f9f378a58c136584b79bf212ed
SHA256

a9ee9c00682221b5833a1ae427f2f04f020a0d7951d112f8f07a6e27f63e9566
SHA512

19dd05e30a7b4efafe541f4a2085c8e26628e5e55eeda80a8222eef27b7f5a3149d2ec18df92504147fc01cb1d0f2304142e8089dd6951c035dfc94b30fd77fe
SSDEEP

3072:r9joIZKg5d8xanuV3EOKSHx0XL1OXnCD8wT0tXS/1qCnmkIJ/YvsIP6:r5oCLuGO/01O3E8wT0VgqC9CI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
939dd261f9cf3958df53b1f5a00354f2_JaffaCakes118

Files

939dd261f9cf3958df53b1f5a00354f2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

877fc0159ea90fb28f5f2573a64ee7dd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
GetCurrentProcessId
GetCurrentThreadId
GetProcessHeap
GetStdHandle
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 298B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 223KB - Virtual size: 222KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ