e193e129ce5886f054b05e74d9185d66_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e193e129ce5886f054b05e74d9185d66_JaffaCakes118
Size

333KB
MD5

e193e129ce5886f054b05e74d9185d66
SHA1

74d2cb849396c6410dafe90c7b8eb60296f7f46e
SHA256

181a4644226dfa47c3e8eee32e9f5913f6a0a6bc8d3a9c70af966e3bd03e6227
SHA512

5245b2160ef59b156f3da8a3ce3b7c2074f39678b9d2790422da0386105aac83e6f9321e3bee8ebd60ddac2ec0bf39eccbda3e30bab690ecc75a182a18d8958f
SSDEEP

6144:352o4ibrkz0SBvGZXluy+yQ30D3SA5sqh4Lfk+fAvKcjltGiWUpCZKoPfD8:352HiOGZ1uy+yQ30Bfh4LfXfLgtfYKo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e193e129ce5886f054b05e74d9185d66_JaffaCakes118

Files

e193e129ce5886f054b05e74d9185d66_JaffaCakes118
.exe windows:5 windows x86 arch:x86

48883ba2d26681cf8e8663918efdc499

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualAlloc
LoadLibraryW
GetTickCount
LoadLibraryA
GetModuleHandleW
GetSystemTimeAsFileTime
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetProcAddress

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 151KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 139KB - Virtual size: 554KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ