c921f1c134c45fb4ce839ecf18b71672_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c921f1c134c45fb4ce839ecf18b71672_JaffaCakes118
Size

25KB
MD5

c921f1c134c45fb4ce839ecf18b71672
SHA1

0702fdd66cc591608440d0d2c568ffdfa4102876
SHA256

85ea312f4e48e4f1fabf46db8db1aafef6cd9746f4f759d4fab36a2b3785de76
SHA512

5a305ae97b7793984d8d477bc5247b4afc815922a59060d400f9110840db78182fdf0c53d60e14a910032b32e372f33398d04fe8186d0a80660f9470fa0295f0
SSDEEP

768:zvNPsq1lDf+kMwpwPE+AHs6pfoR9CiQgOp5:zvNPsqPCA9+AH5QR9Kp5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c921f1c134c45fb4ce839ecf18b71672_JaffaCakes118

Files

c921f1c134c45fb4ce839ecf18b71672_JaffaCakes118
.exe windows:6 windows x86 arch:x86

77b5712277e4dbd07cb7a64407c84a3a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
MapViewOfFile
FindClose
GlobalFree
FreeLibrary
GetProcAddress
CreateDirectoryA
CreateFileW
GlobalLock
SetComputerNameA
Process32First
CreateMutexA
OpenProcess
GetModuleFileNameA
CreateProcessA
Process32Next
GetLastError
LoadLibraryA
GetVolumeInformationA
GetFileTime
GlobalUnlock
GetModuleFileNameW
GetThreadPriority
ReadFileEx
GetWindowsDirectoryA
GlobalMemoryStatus
SleepEx
FileTimeToSystemTime
GetShortPathNameA
GetTempPathA
CreateFileMappingW

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE