dd531946efcd1a1b4af47c73f7abe0a8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd531946efcd1a1b4af47c73f7abe0a8_JaffaCakes118
Size

1.9MB
MD5

dd531946efcd1a1b4af47c73f7abe0a8
SHA1

9ff9cb020eabafa47716bafe7f8739f8a2cb0978
SHA256

dcaf220b1775bd5f86422afa5a9fcd829c804070ae1684e12d1c84089a84e605
SHA512

bdc925e61a607f399c4886a56f94a7189f1739df47a6a2f41d0ad95dd91eb35c8251230f48c0f25268afbae63616571c6940779be6118c650b8f005519de2ca6
SSDEEP

24576:FhLn23lg7sXSkCU9goL3DaNA8ZjwI6SMlBOI:Fhr2e7sHCU9X3eNA8ZoSMlBX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd531946efcd1a1b4af47c73f7abe0a8_JaffaCakes118

Files

dd531946efcd1a1b4af47c73f7abe0a8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

17ac1c8a533312daecee1a18a5ec137a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

o.pdb

Imports

kernel32

ExitProcess
InterlockedExchange
Sleep
InterlockedCompareExchange
HeapFree
RtlUnwind
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
HeapAlloc
SetLastError
UnmapViewOfFile
SetFileTime
GetFileSize
GetFileTime
CloseHandle
CreateFileA
MapViewOfFile
CreateFileMappingA
SetEndOfFile
SetFilePointer
HeapDestroy
SetErrorMode
LoadLibraryA
GetModuleFileNameA
GetProcAddress
DeleteFileA
GetLastError
ExitThread
GetProcessHeap
EnumDateFormatsExA
ReplaceFileW

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ