feaa5431320c58ed0d1f080e35e305ac_JaffaCakes118 | Triage

Sharing

General

Target

feaa5431320c58ed0d1f080e35e305ac_JaffaCakes118
Size

190KB
MD5

feaa5431320c58ed0d1f080e35e305ac
SHA1

47e2fe523692000b867370b2ede41aabf6554192
SHA256

bc8ea0166ff62defa3cb50fb875d3470d35a81f0544ce4ac7da4fc345ba66655
SHA512

5efb90446909b59de1634aeb99051325c49643beedd6bc11896438ea854a9ece92b0124f2913f60fdb1b445da08d48d3a56b73a514555b6eb86ce1dbfe17107b
SSDEEP

3072:ZMkOna356KdrdO+ecu8dXjPvr2KyaoFfjL0tzgx0lKVRCutsbFZHEw:wn055T5Jjr2ZxAgPVRCF59N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
feaa5431320c58ed0d1f080e35e305ac_JaffaCakes118

Files

feaa5431320c58ed0d1f080e35e305ac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ce23e17c1503f46f6b582910f25dd599

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetProcessPriorityBoost
InterlockedDecrement
ReadFile
Sleep
TerminateThread
DeleteCriticalSection
EnumResourceTypesA
GlobalLock
WriteFile
CreateFileW
CreateProcessW
GetModuleFileNameW
GetModuleHandleW
CreateEventW
GlobalAlloc
GlobalUnlock

ole32

GetHGlobalFromILockBytes
CoTaskMemFree
StringFromGUID2

imm32

ImmAssociateContext

Sections

.text
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ