96c3772af6cb606154b3df1be1ba8c1c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96c3772af6cb606154b3df1be1ba8c1c_JaffaCakes118
Size

1.0MB
MD5

96c3772af6cb606154b3df1be1ba8c1c
SHA1

434644b4ce0f90402b2291f1878002aaece517ab
SHA256

01ce3593b4ac06831d7a1bd8e58b55451d1f32008c432c39dfa5c19433cd20b5
SHA512

cc2333be3baf91b3013c2e90eda18172cd22299e207816ecbf5b75e02c7b57227bc9d6c3e766ff504e80285b288d01edeaaaedaca26d207e307047739d47c116
SSDEEP

24576:bRpU7pgQFP3i9HbwNAiiBn+tAY7PozIcbMM1CgwPfWa:bROnM7Wbkn+t2McTCgwPOa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96c3772af6cb606154b3df1be1ba8c1c_JaffaCakes118

Files

96c3772af6cb606154b3df1be1ba8c1c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

02792e2caf839b3e8a933975b6514eeb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED

Imports

winmm

waveOutReset
waveOutClose
waveOutOpen
mmioDescend
mmioClose
mmioRead
mmioAscend

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 578B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�reloc
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ