5583033a6969bf3917a92c801aed61d1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5583033a6969bf3917a92c801aed61d1_JaffaCakes118
Size

142KB
MD5

5583033a6969bf3917a92c801aed61d1
SHA1

8170ed769f518378b40a2b9c921d658b996f080b
SHA256

01a12a9f4bf01e631461cbdbe34c9f54843d0d4c520b38dfb6c99b9b45f0ff1e
SHA512

86e611f0486cdf8d7170522ed1d698b7b077029b572005ba8b053bf0b22c1e24741eb1a803a5b2bc02ef2ead961f41282104566b6deff32a97d7ef1e4d916360
SSDEEP

3072:3lR1yascPzSnbyU49xU04dJgYbg8Oeu9xr1rA76T5tyT7maL22Q:6kSneU4HUbE8Ob9Y7653

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5583033a6969bf3917a92c801aed61d1_JaffaCakes118

Files

5583033a6969bf3917a92c801aed61d1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3b0bad9780255a7ea26fd840cf2b2578

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateEventA
CreateFileA
EnterCriticalSection
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
LeaveCriticalSection
LocalFree
SetLastError

Sections

.text
Size: 129KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 596B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ