c7c231a8566660b90e69af6f53505ad6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c7c231a8566660b90e69af6f53505ad6_JaffaCakes118
Size

192KB
MD5

c7c231a8566660b90e69af6f53505ad6
SHA1

e29d5d9cc5e8161f7c1f6f35632a34536829e09a
SHA256

a1dc8972cc71c053f4e7df689e91b1468b46ed601da4314f23cd6baabaef516c
SHA512

2a908041e41f97228f982f8e8b094ceb61e45c5c467bd1fe95a70cfeee60c4612b59006f2cc97557673a052b941ce6130d66d68778f4974c4409d32fe2943530
SSDEEP

6144:OQiK/GPlrk3ZbcLQ4rc3GxtaQi2wHT/2D6OSIc:O2/ilYp4lDgCY/hIc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7c231a8566660b90e69af6f53505ad6_JaffaCakes118

Files

c7c231a8566660b90e69af6f53505ad6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4a218f939ec0e8637f9becd53a2dfe69

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmAssociateContext

ole32

GetHGlobalFromILockBytes
CoTaskMemFree
StringFromGUID2

kernel32

InterlockedDecrement
SetProcessPriorityBoost
CreateEventW
GetModuleFileNameW
CreateFileW
GlobalLock
GlobalAlloc
EnumResourceTypesA
TerminateThread
ReadFile
CreateProcessW
DeleteCriticalSection
GetVersionExW
WriteFile
Sleep
GlobalUnlock

Sections

.text
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ