172493cf5c8697713223698ca759b331_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

172493cf5c8697713223698ca759b331_JaffaCakes118
Size

15KB
MD5

172493cf5c8697713223698ca759b331
SHA1

538f3df78041c16870adf903df6afc83a7db6b49
SHA256

f52a1f5f3792318d00d7cf1ea455729ac56f6b0dfe72cc9e41e4d309443da191
SHA512

a77b89be8886e0d7b38a485f5275a19e7afe5b7f7ce54849e8c38570dd56cc667fc2fac31a3daaef2032eea29b5189f5324790bfc5bf15e011ffb99a288e4068
SSDEEP

384:uk/d7u9gB8BKpR0+qY2ct8WITZn0E1Pug:FZkgU+D2cBo100mg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
172493cf5c8697713223698ca759b331_JaffaCakes118

Files

172493cf5c8697713223698ca759b331_JaffaCakes118
.exe windows:1 windows x86 arch:x86

adad19961b9311e16dc710907e287dd4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeviceIoControl
EnumSystemLocalesA
FatalExit
Sleep
SleepEx
CreateJobObjectA
CreateWaitableTimerA

msvcrt

getwchar
fmod
atan2
fscanf
isgraph
isupper
fsetpos

Sections

.text
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE