b9724898cdbc04e836956fc309021723_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9724898cdbc04e836956fc309021723_JaffaCakes118
Size

333KB
MD5

b9724898cdbc04e836956fc309021723
SHA1

b743ff3dcbacda0633c4fe0ecb6a3d9ef800f15f
SHA256

0b597687bb231a18e74c6e6e737c48c16881f776d0b5b9c3170073fa8211eff8
SHA512

53e3e3976687146d9fb9caf90036103d88b0de626c8d8c668a4a23482cf27ada44176597308ea7360c60cee1c0a31d26aae7bfcf7e1deab0385293b14f03d5c0
SSDEEP

6144:yt00zak1voUcCQH9mlgdZlj6w0uPKiE/xwO1jMHfC9O53KO9RdsFCN:yCIaWwUCOCJ63eKiE/xwOdMHKw5aO9Hs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9724898cdbc04e836956fc309021723_JaffaCakes118

Files

b9724898cdbc04e836956fc309021723_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1bb4bd2b9792ee260431dcd3af5a7f12

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetSystemTimeAsFileTime
VirtualAlloc
GetModuleHandleW
GetCurrentThreadId
GetProcAddress
LoadLibraryA
GetStartupInfoW
GetTickCount
QueryPerformanceCounter
GetCurrentProcessId
LoadLibraryW

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 133KB - Virtual size: 540KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ