a5ddf9327cacd6dbc7d6925432ee8942_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5ddf9327cacd6dbc7d6925432ee8942_JaffaCakes118
Size

74KB
MD5

a5ddf9327cacd6dbc7d6925432ee8942
SHA1

9fdb12f410a19912353389ed5f2f783e5960ec93
SHA256

cf19186f5b69eae67845e3cb1b448cf873f600bccc8ad5524df63e063b32abdf
SHA512

629e6acff00df08239b55ffb42165f1e327a43efd6c939e0dbaad7f0a38c846217a77d44f9b5525e26d2077bb2ed6408eaabc24d6255f554f4a1ec21a808b99d
SSDEEP

1536:U/5dBH1ZKAzLs3pTEJNI2IP2oHgdcoG4RjlFm0lXVjK:UhP1cAseJYeorqRzXVO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5ddf9327cacd6dbc7d6925432ee8942_JaffaCakes118

Files

a5ddf9327cacd6dbc7d6925432ee8942_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5e6eba34aac0afe9b17a7ca5e95ac77d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

printf

kernel32

GetVersion
QueryPerformanceCounter
GetSystemTime
VirtualAllocEx
GetCurrentProcess
GetTickCount
FindClose
GetOEMCP

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ