f53032ade38e93029de2010c050fcfde_JaffaCakes118 | Triage

Sharing

General

Target

f53032ade38e93029de2010c050fcfde_JaffaCakes118
Size

468KB
MD5

f53032ade38e93029de2010c050fcfde
SHA1

2afe7ba00b8962e75b03f07bd5ed048a0bee8589
SHA256

ddd001443d80c7bc930cc8690625d7e0c602248f57fc8fd43351cc2d2c9acacd
SHA512

3841c49c80c8200169c66b665f1af4daece2e8abbc2688265d24232b21bd31633f0507fe06cc1f8aa21245902e9406ab1ed6c06e2c7a17f1a42b707473429087
SSDEEP

12288:aLJwDZO9z/25dJrwXt4a7lUuG/t23n3A/U5:oJiOp/2BcXt4a7lUupwM5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f53032ade38e93029de2010c050fcfde_JaffaCakes118

Files

f53032ade38e93029de2010c050fcfde_JaffaCakes118
.exe windows:4 windows x86 arch:x86

67add96963a351f110b77f970ecec4b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

DecryptFileW
TraceMessage

user32

GetMessageW
GetMessageTime

kernel32

CreateEventW
GetUserDefaultUILanguage
GetConsoleWindow

Sections

.text
Size: 463KB - Virtual size: 464KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 369B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE