e259678bcae528f6b223d2cdf6dcb071_JaffaCakes118 | Triage

Sharing

General

Target

e259678bcae528f6b223d2cdf6dcb071_JaffaCakes118
Size

41KB
MD5

e259678bcae528f6b223d2cdf6dcb071
SHA1

6eafa22e263c1010fec325bc688331666790c06d
SHA256

1dc9a86a25b29d3af115ed70af3a5e8b7745f006b7eaee66fdb52c0a7ccfa5e7
SHA512

c8a08262b419858bfc1b0387c173d0ebd6cc325b96b7eaca0eb921badfd8dd11c4a321a9d363b93a27a51258dd3168dcca93209630a40a9bed88a1cb732f5023
SSDEEP

768:E1XYZk7JeaIOGvskbguLQlCqrD3vTLXnX7eKd5kTBj6J0C:O0k7JGskbv6DLXX9ABeJ0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e259678bcae528f6b223d2cdf6dcb071_JaffaCakes118

Files

e259678bcae528f6b223d2cdf6dcb071_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4ab34afe7afeae6eefa5426c290847a6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimeAsFileTime
LoadLibraryW
VirtualAlloc
GetModuleHandleA
GetProcAddress
QueryPerformanceCounter
GetTickCount
DisableThreadLibraryCalls
SetLastError
GetCurrentThreadId
GetCurrentProcessId

atl

AtlMarshalPtrInProc

ntdll

NtAddAtom

Sections

.textbss
Size: - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ