ef4bad1cb33794b6152ab0b3c77f967b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef4bad1cb33794b6152ab0b3c77f967b_JaffaCakes118
Size

4.7MB
MD5

ef4bad1cb33794b6152ab0b3c77f967b
SHA1

53e9fb170c5fac3208e74db03803875d8a258f06
SHA256

98e8cd365366b2f4744914aa10dd267e3c96a4da00c1bbfa8beb71d95384e2f7
SHA512

c1832e22a878f0281ed0d1fcb4a6b20252f4551f8bf291b16f26e8c6c867c0ab71f2a4fc95e48fc488a3acd89dbe1220cf67baca9be2ca440a4a2dc47d207d83
SSDEEP

98304:FxBfcKqjCVUK1j/489GcfPz2JOHWL+zipeyRAR3DAn4Ox9Btgtn:FTfckVfGcf72EW8ipzRARzA4Ox9BtgJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef4bad1cb33794b6152ab0b3c77f967b_JaffaCakes118

Files

ef4bad1cb33794b6152ab0b3c77f967b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

226c5021cea3bf8bf9a68f30bb29ee76

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualAlloc
RegisterWaitForSingleObject
SignalObjectAndWait
ReadConsoleA
UnregisterWaitEx
WaitForSingleObject
UnregisterWait
WaitForSingleObject

imagehlp

TouchFileTimes

Sections

CODE
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2.2MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 299KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ