85a9764f7f34c2e9ab2483233b16b19a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85a9764f7f34c2e9ab2483233b16b19a_JaffaCakes118
Size

35KB
MD5

85a9764f7f34c2e9ab2483233b16b19a
SHA1

2fadb7a7dc57b9a4c7135981b9b324952ac7137d
SHA256

f98a739ded0d47486c2f2a9ad930ecfc353dcc8b01acfb900cdd88891c0698b3
SHA512

9d394e4452f26bf692c24211e4ac818c4080962a0b3a325178cd439fb9e06ed4730799dc387bb61b38d5eafbdadfc52419303a57ed53c873cad1dc63da5814d6
SSDEEP

768:SKhqynyoyuDvLPI1ZrW+3XIGfF8yjbbeCnQI487Dw0O9:oaDvrI1FD3XNfFJGCQI450O9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85a9764f7f34c2e9ab2483233b16b19a_JaffaCakes118

Files

85a9764f7f34c2e9ab2483233b16b19a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4856275c5cf4ed0db0bc299ad872eec8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

ShowCursor

gdi32

TextOutA

winmm

timeGetTime

bass

BASS_Stop

core

??1NWnd@@UAE@XZ

engine

??0NEngine@@QAE@XZ

Sections

.MPRESS1
Size: 28KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE