3c1a602f11b9ec9f25da3f4e439fcb29_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c1a602f11b9ec9f25da3f4e439fcb29_JaffaCakes118
Size

14KB
MD5

3c1a602f11b9ec9f25da3f4e439fcb29
SHA1

924012b365f677b5973b70e5fa1d70375615032f
SHA256

19c108b3ee145eebf390656df1680545a9f015a0b2e5fc73828d71f854f9265c
SHA512

f38a9ad17ad688324c61c6a83cdf0402aa8bd59bf8b7e70ec2f10bea1f676b49f3d9270a278bb1a4ffb1efa99b778dccaca9757c66e8db761d80d5f411d549f1
SSDEEP

384:A7OJMbS/GmWituO7r/gJ+px6UMGMlaQmdzU6Yl9Y:lm76tuO7r/gJoTMIQKFT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c1a602f11b9ec9f25da3f4e439fcb29_JaffaCakes118

Files

3c1a602f11b9ec9f25da3f4e439fcb29_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7aa10f083b64f9fb69ba391252670185

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
InterlockedExchangeAdd
InterlockedIncrement
Sleep
GetCurrentThread
QueryPerformanceCounter
GetTickCount
GetACP
InterlockedDecrement
HeapAlloc
GetProcessHeap
GetCurrentProcess
InterlockedExchange
GetModuleHandleA
GetProcAddress

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ