02c4cd58eac2b7f6cb014baca8df4c01_JaffaCakes118 | Triage

Sharing

General

Target

02c4cd58eac2b7f6cb014baca8df4c01_JaffaCakes118
Size

113KB
MD5

02c4cd58eac2b7f6cb014baca8df4c01
SHA1

c68507396da0b4cbf5026f286b0c31cce860dd4a
SHA256

e0f3087836da3daf941a6f89890ceb6a1b52cb8076e26e5ad9e5f0454f2dd868
SHA512

1b474d505cb1cd0e2d773fd4ee8ea3988f8c57d343b422515d2fd8d5a69c6d51579956e67f5bf8bd5e036ff2c4201a3504cf10c7b1aa1db25ddda1819f0386b4
SSDEEP

1536:v6OmzXyVDXYhV9lR2qaOnaxNdOn5mVd9EZN11gW3Jk3Yn3:v4zXiDXUlRvFs+5mH9ED1D9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02c4cd58eac2b7f6cb014baca8df4c01_JaffaCakes118

Files

02c4cd58eac2b7f6cb014baca8df4c01_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f21e189749bd822080100f3640bd258f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DisableThreadLibraryCalls
EnterCriticalSection
GetACP
GetCurrentProcess
GetCurrentThreadId
GetModuleFileNameA
GetOEMCP
HeapAlloc
InitializeCriticalSection
InterlockedDecrement
LoadLibraryA
LocalAlloc
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
Sleep
UnhandledExceptionFilter
VirtualAlloc
lstrcmpiA
lstrlenA

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 71KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 610B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ