0aa5ea81139aacad78a4c7ca99a7a92b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0aa5ea81139aacad78a4c7ca99a7a92b_JaffaCakes118
Size

112KB
MD5

0aa5ea81139aacad78a4c7ca99a7a92b
SHA1

3496ff0014c06862a5d046292ff376c4cd2795e8
SHA256

2876560cb5ad1ec00b611bcb2d38ae6486ec58749fcf305e721ff2459a8e9982
SHA512

00845794524a880e9dc34a5c27f5677688ee424a96c1a4a1b5a04ae85f037c775d0fed3facbf308b408bcf0cb6c5384ebdde8935bc27380279fe48a549db5c11
SSDEEP

1536:elOC0pTENUhZR3S0lEdmjv5hwD/rqAkqxQM9uw+L/Su5e4AU+VrIS8Mrp2DC:elUh9hZRi0lDzyrU+NaSu5SzGS8kM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0aa5ea81139aacad78a4c7ca99a7a92b_JaffaCakes118

Files

0aa5ea81139aacad78a4c7ca99a7a92b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c8afd0fda879c604b6eaaeba6dc64589

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
Sleep
ExitProcess

user32

GetDesktopWindow

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 238B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ