c0064c0d100f231275efe6a73fd48e3d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0064c0d100f231275efe6a73fd48e3d_JaffaCakes118
Size

164KB
MD5

c0064c0d100f231275efe6a73fd48e3d
SHA1

bf87c44cf7d2c72e2adfa87264be369834cd10ec
SHA256

da0c2564ab6abc8fe9b5b0e41c8cfb07d5631f1623d7d61d8319db23f1014882
SHA512

c00426410a7edf01ce791cc6ff5b56ab0215adf0e90e519f3cfd399d9beb1517207416db077b2baeef2b59889c12776d7dbe9fea44d8d5869bfbd3ac7e784732
SSDEEP

3072:pHPOida5eG5qJA/YeYvZX16KRtplPm46BN/q9WjCpmA3A8ntd:pWidOqJEYvl16Kz3mv9tArnb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0064c0d100f231275efe6a73fd48e3d_JaffaCakes118

Files

c0064c0d100f231275efe6a73fd48e3d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

22aa25a9dbb99211db866b1a30897dd8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
GetModuleHandleA
GetFileSize
FlushInstructionCache
GetTickCount
VirtualProtect
GetLastError
GetProcAddress
LocalFree
LoadLibraryA
Sleep
LocalAlloc
ReadFile
VirtualProtect

user32

wsprintfA
wvsprintfA

Sections

_1S\OFmv
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

p=&Zs_:>
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

8lswE:g,
Size: - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

6fi,D(!S
Size: - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

*ZY^a9ZX
Size: 160KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE