13b598b4896ef780e72fadabcb5e2bd5_JaffaCakes118 | Triage

Sharing

General

Target

13b598b4896ef780e72fadabcb5e2bd5_JaffaCakes118
Size

225KB
MD5

13b598b4896ef780e72fadabcb5e2bd5
SHA1

fdda4c38f93cf2bc8d175f8b0dfc543d2c644ab4
SHA256

fba515f9df2116e9a84c56417438428f034b72ed2c95c399b6c46650468dde88
SHA512

7c33aa846acd2150802254b8f1fb67f116c595df073ac7e118f45573b48e0afa3b4aadc54b29ab970476faee9b079499f7873b4687548be769aa1e6416312ab9
SSDEEP

6144:Hcvpuacb3DmRUrTxlGgYP0Vlpho4wEouqIW:HcvpkrHrYPaaEouqIW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13b598b4896ef780e72fadabcb5e2bd5_JaffaCakes118

Files

13b598b4896ef780e72fadabcb5e2bd5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e44a1a53d103625a40f60599ebe9f749

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
memcpy
_CIlog
_CIpow
strlen
memmove

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
CloseHandle
InitializeCriticalSection
WaitForSingleObject
PeekNamedPipe
HeapAlloc
HeapFree
EnterCriticalSection
HeapReAlloc
LeaveCriticalSection
TlsGetValue
TlsSetValue
TlsAlloc
WaitForMultipleObjects
GetCurrentThreadId
GetCurrentProcess
GetCurrentThread
DuplicateHandle
CreateSemaphoreA
CreateThread
ReleaseSemaphore

user32

CallWindowProcA

wsock32

closesocket
WSACleanup
WSAStartup

Sections

.d
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.d...
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ