a982e5c1595690ea85951ac792b81f5f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a982e5c1595690ea85951ac792b81f5f_JaffaCakes118
Size

106KB
MD5

a982e5c1595690ea85951ac792b81f5f
SHA1

f5972ee6009f981ce777dd97669996ae133b19ef
SHA256

3cf24e24f397444a1de6fc3db8dc8ef1293ab13b5800c5c1022e3c29c1e37dea
SHA512

edf8ac90a08388d9e0fdf9f41d9766986bbef6a7f671b86722405b7c45717d118f49fd11ccbf4f9e50b434b7ae2dcc0ffad26ca3eeb1e15032dc00cc8f21d12f
SSDEEP

1536:jiAy+kqMVcSk49C4UnIt8+GtglUaqgLryH3r52m93ubBdoFeJFRr1/f3za8hz5z:uAymsQ3It8Ta5LryYbX9d8Uz1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a982e5c1595690ea85951ac792b81f5f_JaffaCakes118

Files

a982e5c1595690ea85951ac792b81f5f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4ac3329fdacf8a1d0085f142602d49ad

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
InterlockedDecrement
GetSystemTimeAsFileTime
InterlockedIncrement

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 278KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ