a5ff57f5c948fdc00e4532bf760008e6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5ff57f5c948fdc00e4532bf760008e6_JaffaCakes118
Size

52KB
MD5

a5ff57f5c948fdc00e4532bf760008e6
SHA1

e628dde10e8a09c79192af0284add6efaf174cce
SHA256

9a0e23a51e31196b8996845368dcb477bdb3a6d9ac172ed99c96d763a2f11244
SHA512

94f2cec41980a7dbb6a14d5ecd2e96c3dd1a7b389feb34832ac18ce2f5036fb4d4f27e6e2c1318f4bcdd4c4c74f18e42a203f12027a610c725791d3eec82254d
SSDEEP

768:qkwP3rYJ69pdLNFX1dekTBIIxVpxvU8guANzfBDYLsi8lXEhFK4:qkwP3kJ69b1gkTvxT87XEG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5ff57f5c948fdc00e4532bf760008e6_JaffaCakes118

Files

a5ff57f5c948fdc00e4532bf760008e6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

17ac1c8a533312daecee1a18a5ec137a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
InterlockedExchange
Sleep
InterlockedCompareExchange
HeapFree
RtlUnwind
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
HeapAlloc
SetLastError
UnmapViewOfFile
SetFileTime
GetFileSize
GetFileTime
CloseHandle
CreateFileA
MapViewOfFile
CreateFileMappingA
SetEndOfFile
SetFilePointer
HeapDestroy
SetErrorMode
LoadLibraryA
GetModuleFileNameA
GetProcAddress
DeleteFileA
GetLastError
ExitThread
GetProcessHeap
EnumDateFormatsExA
ReplaceFileW

Sections

.code_01
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ