d48cec1bb1de2c15bd80e2a9d50188d5_JaffaCakes118 | Triage

Sharing

General

Target

d48cec1bb1de2c15bd80e2a9d50188d5_JaffaCakes118
Size

271KB
MD5

d48cec1bb1de2c15bd80e2a9d50188d5
SHA1

25b9c9b591045e7c8bd3769b178ee9110b752b3f
SHA256

b195b9bbd272fcfc2231035db167a178ea47256db6515ad213838ac657f0ae3a
SHA512

dfbf6ca9c36dafcf5b6dc925aec3bba4b92f341b1873703f31ff877ad076557e471391b522a0e887ee5352b165d5faf3f42ff5aff0fd1fcd296899e9ed5e5861
SSDEEP

6144:BOIFuIBD3srtqK1b4+YEy7+QPZn1vALZ/CavHCkw:BOXIB34tO+YtRn1Ep

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d48cec1bb1de2c15bd80e2a9d50188d5_JaffaCakes118

Files

d48cec1bb1de2c15bd80e2a9d50188d5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c83ffcb74b151ba4cfdaa589ea7b54ab

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateEventA
CreateThread
EnterCriticalSection
ExitThread
GetCurrentProcessId
GetLocalTime
GetThreadPriority
GetTickCount
GlobalAlloc
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
SetEvent
Sleep
UnmapViewOfFile
WaitForSingleObject
WriteConsoleA
lstrcmpiA
lstrlenA

user32

EnableMenuItem
GetMessagePos
GetWindowLongW
GetWindowThreadProcessId
PostMessageW
SetMenuItemInfoW
SetRect
TrackPopupMenuEx
UnionRect
WaitMessage

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 878B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 257KB - Virtual size: 259KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ