082064fb46a468e129b2e05bc68ff98b_JaffaCakes118 | Triage

Sharing

General

Target

082064fb46a468e129b2e05bc68ff98b_JaffaCakes118
Size

112KB
MD5

082064fb46a468e129b2e05bc68ff98b
SHA1

26e06d210449a47f0541f8fb5fa6518e4bd6be46
SHA256

83567f8faf634665f306057c8ffda278ecc24655525efa1d3444ee19d8d61c9f
SHA512

69d390d61e712473a959a4e3857a9c81296c9dc5afeb3f150e6ba508dea54eea46e1627f4d44bccd301bdeaba3b1a8f796f0ad3d420611a047a09c4e71546cd1
SSDEEP

3072:VR4+mD0SXdPoMEDb710MaFq7hzP+q7iD2z:YdbXdtEDlbaF+VS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
082064fb46a468e129b2e05bc68ff98b_JaffaCakes118

Files

082064fb46a468e129b2e05bc68ff98b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7e408cf773ef71c30f185247109cdb2a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
GetLastError
Sleep
ExitProcess

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ