ac983cc58cdaea66fcb7ddb73b39872b_JaffaCakes118 | Triage

Sharing

General

Target

ac983cc58cdaea66fcb7ddb73b39872b_JaffaCakes118
Size

26KB
MD5

ac983cc58cdaea66fcb7ddb73b39872b
SHA1

2497af88a4ef2813db7661e311f3e47cabae1d23
SHA256

4a569269406f5df222c4a7bbf78ea3dc06edc47736edb46fcdb20f5029bf4564
SHA512

400ce7eb389f24583d650059df46fda43a1046c81792625a5a5b74e08ff750819163fbeb42e3260f3a0321e787fe2e4d5cd7f04d4e484dd16e5a9566d40a1edb
SSDEEP

384:cisvbhA4/QQxOlMT9Tdix+vNKIEzFeym/7he2vV286fD+L45Kd:KbhzQQIMTuIKFm/7ETisKd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac983cc58cdaea66fcb7ddb73b39872b_JaffaCakes118

Files

ac983cc58cdaea66fcb7ddb73b39872b_JaffaCakes118
.exe windows:3 windows x86 arch:x86

bd04347bbf9b3243b723f0148f4277ac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
CreateFileA
EnterCriticalSection
GetTickCount
LoadLibraryA

user32

CharNextA
InvalidateRect
IsWindow
LoadIconA
LoadStringA
ShowWindow

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 358B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ