d234d0c280118c2e92cc1906782de44c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d234d0c280118c2e92cc1906782de44c_JaffaCakes118
Size

1.2MB
MD5

d234d0c280118c2e92cc1906782de44c
SHA1

48945e4c7397120dfe9e81edec644eb0c6953e64
SHA256

cf39188f9185e302f67dad7eb9843832f339012a8d02a6b747a6dc2b9f17893f
SHA512

11f6154ea1e4fa681b7c687a35d7e1a66a7f1dfbc69fc7e6055ce2767d1f33092f5c791a2461b7e2b64293199758322ecb1e9e6d37ea9088c000cdd14d02497c
SSDEEP

12288:shpeIAKAyRiPmUvAhAnjesigulBhZLJ2yHGmtN+:sh3FRUmUGee/gulPdmmtN+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d234d0c280118c2e92cc1906782de44c_JaffaCakes118

Files

d234d0c280118c2e92cc1906782de44c_JaffaCakes118
.exe windows:4 windows x64 arch:x64

96c44fa1eee2c4e9b9e77d7bf42d59e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

winmm

timeEndPeriod
timeBeginPeriod

ws2_32

WSAGetOverlappedResult

kernel32

WriteFile
WriteConsoleW
WaitForSingleObject
VirtualFree
VirtualAlloc
SwitchToThread
SetWaitableTimer
SetUnhandledExceptionFilter
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
LoadLibraryA
LoadLibraryW
GetSystemInfo
GetStdHandle
GetQueuedCompletionStatus
GetProcessAffinityMask
GetProcAddress
GetEnvironmentStringsW
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 1022B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ