7cdf2bf37d386cbf5c21ac2fc0fc03e0_JaffaCakes118 | Triage

Sharing

General

Target

7cdf2bf37d386cbf5c21ac2fc0fc03e0_JaffaCakes118
Size

1.0MB
MD5

7cdf2bf37d386cbf5c21ac2fc0fc03e0
SHA1

d2c7e8d0a01985ec559c8d7a097ecb5ec6614799
SHA256

9f5cccbd8fedd9220042bd52b1e5106fcccf0ef7655a6770ba17cda1cd504560
SHA512

18a375fed1581ba04b2ab14c39f3516dc5adb8f5bcfa5be2796c36e0bd1f7e8ba1f63526b8667a987cb941c767256d426704cb144a0368f8204433def6e009ab
SSDEEP

24576:HwZFQ8PlrpwlfmDjeBHRupjPG4FUT+mt+zQ:N8NrpCfmDSBSFUT+mtGQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
7cdf2bf37d386cbf5c21ac2fc0fc03e0_JaffaCakes118

Files

7cdf2bf37d386cbf5c21ac2fc0fc03e0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e36e902cb235a51623bb6e90e52e7504

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetModuleHandleA
GetProcAddress
LoadLibraryA
VirtualFree
VirtualAlloc
WaitForSingleObject
CreateThread
HeapAlloc
HeapFree
TerminateProcess
GetCurrentProcess
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetStartupInfoA
GetCommandLineA
ExitProcess
GetProcessHeap

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 598B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ