1484192a89c9424f07862ce3457da45d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1484192a89c9424f07862ce3457da45d_JaffaCakes118
Size

149KB
MD5

1484192a89c9424f07862ce3457da45d
SHA1

1976a35672628274c7f20e33a59373728239ef72
SHA256

d0fab979942b913b541c1819eb1577ca08ed9a764845ca576dd7a8c5435fa904
SHA512

b32606fd5fff395080c92eff645bd5d2c05a8bca0ce0e1d6b8b3dc0fb91ac7898218b9261c3e2c500863bc61968ff36da5bcfbda2fac72cc6f806c5b6f88ffef
SSDEEP

3072:6JEhm7M+DEWkxbTtBQHBNeDi5WUEXqqztrpTKVMcKFNslOTlg:bhm7RDuYHBJPEltdTCEslug

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1484192a89c9424f07862ce3457da45d_JaffaCakes118

Files

1484192a89c9424f07862ce3457da45d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b505cc7388183e57681ba0c8b7d60094

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnregisterWaitEx
FindFirstFileExA
GetModuleHandleA
CreateEventA
ExitThread
EnumCalendarInfoExA
GetCurrentProcessId
DnsHostnameToComputerNameA
SetSystemTime
RegisterWaitForSingleObjectEx
DeleteCriticalSection
GetStartupInfoA

user32

DefMDIChildProcW
OemToCharBuffW
GetWindowThreadProcessId
GetProcessDefaultLayout

msvcrt

_controlfp
_adjust_fdiv
__set_app_type
_except_handler3
__p__fmode
exit
__getmainargs
_initterm
__setusermatherr
_exit
__p__commode
_acmdln
memcpy
_XcptFilter

Sections

.text
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ