08a1caca3f3ee42fc99e3c42dfb407e1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08a1caca3f3ee42fc99e3c42dfb407e1_JaffaCakes118
Size

329KB
MD5

08a1caca3f3ee42fc99e3c42dfb407e1
SHA1

9a815692b9e5eddab31cb6f04271b3a2cfac2701
SHA256

120c2c325366cf6e5e87295cac75fc176ddd0ceee2e058a81e0a2806bb2dbbd9
SHA512

ff742f879145d9c6d74d53540f37ab8fa5f4c4f00faa99a4dd95486e680c6b4aad2ce85c8b406a3bbfadf5a3e9170c6e29be4e5f4add7abc55ed92258fe73185
SSDEEP

6144:T6BUbld2UoLlvEEYYaN2j0IwvNXe8bp5LxxHcEjfFDDfNX:OSb/2PlvEFwj/wVO4vHcE7FDDfNX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08a1caca3f3ee42fc99e3c42dfb407e1_JaffaCakes118

Files

08a1caca3f3ee42fc99e3c42dfb407e1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

534851bd6dddf205e3ce258d11aa9c48

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
GetStartupInfoW
VirtualAlloc
LoadLibraryA
GetModuleHandleW
GetSystemTimeAsFileTime
LoadLibraryW
GetTickCount
GetProcAddress

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 148KB - Virtual size: 549KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ