e1d097b0f01f05388dced9fd6bac53fc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1d097b0f01f05388dced9fd6bac53fc_JaffaCakes118
Size

332KB
MD5

e1d097b0f01f05388dced9fd6bac53fc
SHA1

b8382c47c94c3f2e29f5805cfbe1d8cede8491b7
SHA256

c7c4d6a3eb3e4e85fd31e0ec1c79550ce5a9abf3a1d460bf396cc36df740fc41
SHA512

41dcb10feada0a3094a7e7f3a1113824ef4b2d9e339604273c0517e07c17de731bae75c0d8388fc9117034b717fdbc6e0bcd3fed20a195ade4d4e8207dc404ac
SSDEEP

6144:DPeRzY1c82lVuW6miqX4rqyujDfvu54A3PLzcREma7nTHw94oqS8Kl:Te1b82lVOY4myunfy4QDzMEDzbw9i1a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1d097b0f01f05388dced9fd6bac53fc_JaffaCakes118

Files

e1d097b0f01f05388dced9fd6bac53fc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c769f0ce43ae37fcfcd469d924778351

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualAlloc
GetCurrentThreadId
GetStartupInfoW
GetCurrentProcessId
GetProcAddress
GetModuleHandleW
GetTickCount
QueryPerformanceCounter
GetSystemTimeAsFileTime
LoadLibraryW
LoadLibraryA

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 151KB - Virtual size: 533KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ