c84d44d17ea4c3f2a952b781e3555945_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c84d44d17ea4c3f2a952b781e3555945_JaffaCakes118
Size

99KB
MD5

c84d44d17ea4c3f2a952b781e3555945
SHA1

0cad6a74ed3a1b0f675d14ec0a273c796fee51b6
SHA256

dd764c1da8442ee107c6ee60ba8cd145b51d0e2991ebcf12bf68eb7f70b06da6
SHA512

df1b1dc68718a41892def757f2c1d398e3d91703c99b041c78c072e75bc8d0304c5b881437ecb23d57bfd1f708a68055f2c53b221faa107f43c63ea75267ddfd
SSDEEP

3072:Ux8eNOhXV+rrMK+e0jRKSZahBS3y3BtfSz2pVi:Ux8eNUkORKn7Si3dT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c84d44d17ea4c3f2a952b781e3555945_JaffaCakes118

Files

c84d44d17ea4c3f2a952b781e3555945_JaffaCakes118
.exe windows:4 windows x86 arch:x86

42e7c14ca48123966bb2bc209b151b7d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__osver
__p__winver
__toascii
__argc
__doserrno
__threadid

user32

MessageBoxA
MessageBeep

kernel32

CreateWaitableTimerW
CopyFileW
DeleteAtom
EnumCalendarInfoExW
DeleteFiber
FatalExit
CreateFiber
GetLastError

Sections

.text
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 422KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE