fd5f097768dcee1b9ded3562b4d007ee_JaffaCakes118 | Triage

Sharing

General

Target

fd5f097768dcee1b9ded3562b4d007ee_JaffaCakes118
Size

41KB
MD5

fd5f097768dcee1b9ded3562b4d007ee
SHA1

2a4b066ee2eb49b2219e485acac54feea4e505e8
SHA256

b45f28b0c63ffb5fa5c81ab7b7ebbee9594470447f18f7232df622428775c5fb
SHA512

db2f3881f4bc859378637d649b1dbe24a097e0f0ff357c3289cf7d0bb5d93d629e7e0e887371c332850642c79df92d5cc5dcdde328a616c7d259c19fe53ce1d1
SSDEEP

768:rtLzvMIaTZ62BnYvgDM16j20QWuan7cLGdKCz6Ah6EOhYixN:rxpsZtnYID66jrRp7BICz6w6lT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd5f097768dcee1b9ded3562b4d007ee_JaffaCakes118

Files

fd5f097768dcee1b9ded3562b4d007ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

43cc4f791d528392037cab90d4ce2555

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetCurrentThreadId
FreeLibrary
VirtualAlloc
DisableThreadLibraryCalls
GetModuleHandleA
GetCurrentProcessId
GetSystemTimeAsFileTime
SetLastError
LoadLibraryW
QueryPerformanceCounter

ntdll

NtAddAtom

atl

AtlMarshalPtrInProc

Sections

.textbss
Size: - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

iuspehj
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE