525c0e2315335c7fb4cca276a8f56a69_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

525c0e2315335c7fb4cca276a8f56a69_JaffaCakes118
Size

18KB
MD5

525c0e2315335c7fb4cca276a8f56a69
SHA1

4b5601fb5a6e83f2b83eea77e80a08006879357f
SHA256

5e34915e0a5aec9cf131a7e28ed42d44e215a9824f7ccd26e4df279c7556d044
SHA512

0793a3d14978ea8870e2a1156a13c93e5f18f192f17695ec25aedc125fac3bc2a88a78f422c987658174e2d32f1abdbd912533fafd8c363c95237830f444f689
SSDEEP

192:yDKwuUR2fHBvMxaw3hAkUa39kt+CHBjMGdqAoRDfvJSRBSPd:yDVuUGZQL3Kt+OGGYDfv0Ra

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
525c0e2315335c7fb4cca276a8f56a69_JaffaCakes118

Files

525c0e2315335c7fb4cca276a8f56a69_JaffaCakes118
.exe windows:4 windows x86 arch:x86

451afd9996f47fc797b9be3d4eadebfe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
GetStartupInfoA
GetTickCount
GetLastError
GetVersionExA
Sleep
LocalAlloc
GetModuleHandleA
GlobalFree
CloseHandle
CreateEventA
lstrcatA

msvcrt

_exit
memmove
toupper
_initterm
_adjust_fdiv
__set_app_type
__CxxFrameHandler
_c_exit
__p__fmode
__p__commode
__setusermatherr
__getmainargs
_XcptFilter

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ