adc3afdcd707191764e4a68db188ff01_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

adc3afdcd707191764e4a68db188ff01_JaffaCakes118
Size

331KB
MD5

adc3afdcd707191764e4a68db188ff01
SHA1

2f2bcab005082f18b9a773cb7ffcb5151c9d3c92
SHA256

a6b89e60c800df164804db26b008352b25d466ca187d2a92fabaaf8812e62674
SHA512

0df42c18b5ce5f8f80d98e5f2676aa4a059ef4f42b5f0098d77d829aecbe1a292d901fbd7fdb9d03b60697dfdb9715b8796ad950204f9dea1f527c0427037015
SSDEEP

6144:xkOjFquGB3GUDjwyWmQN5QWGQ3VjsMGjHxCrwyYX2Om0jjZch0D3an1Zp7t7Wojz:vjFqu2HDjwyWmQNVp3+xM6X2OmU+QQ1r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
adc3afdcd707191764e4a68db188ff01_JaffaCakes118

Files

adc3afdcd707191764e4a68db188ff01_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4635bf4f93732ea9d26f573f4bd7c1b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleW
GetCurrentProcessId
VirtualAlloc
GetCurrentThreadId
GetStartupInfoW
GetSystemTimeAsFileTime
GetTickCount
GetProcAddress
QueryPerformanceCounter
LoadLibraryA
LoadLibraryW

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 154KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 137KB - Virtual size: 520KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ