a5a4aa7044bdf950278ba52683dce836_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5a4aa7044bdf950278ba52683dce836_JaffaCakes118
Size

83KB
MD5

a5a4aa7044bdf950278ba52683dce836
SHA1

9e959db9b7ffd21275f075295afe187f0e782cdb
SHA256

e9329301426622bca4e3c38966edfa4e0321bc23737853d302eda0adc9e61933
SHA512

2c6450d6f42f951d14e5fa500596c9c27d77cfa1e962bf1861bb9de3e06c3eac53ea73e04628a4825d7f38f76d5ed16e242f7988acef98528d3e4259102aaf7f
SSDEEP

1536:k3O+6fQ6IlpEDOaqdKdYGdKpb9Z37VweRffLKLvGqIO7WUjEErxTWDTMqhGKYIZg:Z+i6EDOL0dCxZ3i0WLuq/75jBkMqhGKy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5a4aa7044bdf950278ba52683dce836_JaffaCakes118

Files

a5a4aa7044bdf950278ba52683dce836_JaffaCakes118
.exe windows:4 windows x86 arch:x86

26a9d3ca342fbf77e8523711a0b07058

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileSizeEx
LocalHandle
EnumerateLocalComputerNamesW
SearchPathA
SetTimeZoneInformation
ConvertThreadToFiber
DebugActiveProcessStop
VirtualAllocEx
InterlockedCompareExchange
DeleteCriticalSection

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE