9e37111bb4c2dd9440d2eaca87b5cd65_JaffaCakes118 | Triage

Sharing

General

Target

9e37111bb4c2dd9440d2eaca87b5cd65_JaffaCakes118
Size

46KB
MD5

9e37111bb4c2dd9440d2eaca87b5cd65
SHA1

8f4e3aa93e86d989165a987fe62e15a4d42d1ac9
SHA256

dc835aafd9193888aabd764f99b86b1da28341292e4dccc0ec9d84b0a5a72122
SHA512

458f9d09ad10df19f06336703a660bca98299353369a4e23dfa55960d68374b42963c08491249c920128f33ecfa7d708efbe925027706ab5843db48402912082
SSDEEP

768:BJ1RnSYMGCj5qRexIKwONZ9jPiOyX8gSdof1mvMpQc0rCSjpVeoYk4tBQVcM:BJVGjIiIKwONZ9j6OYMdfkic0uSjT4/w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9e37111bb4c2dd9440d2eaca87b5cd65_JaffaCakes118

Files

9e37111bb4c2dd9440d2eaca87b5cd65_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae14b3b3913fa3e77d04701a4a772de2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

atl

AtlMarshalPtrInProc

kernel32

GetModuleHandleA
GetSystemTimeAsFileTime
VirtualAlloc
FreeLibrary
LoadLibraryW
DisableThreadLibraryCalls
GetProcAddress
QueryPerformanceCounter
SetLastError
GetTickCount
GetCurrentThreadId

ntdll

NtAddAtom

Sections

.textbss
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ