0e2c2997f891b4e3adc325390822f34d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e2c2997f891b4e3adc325390822f34d_JaffaCakes118
Size

115KB
MD5

0e2c2997f891b4e3adc325390822f34d
SHA1

eae753c264f25a5c95c19a01355868ee34b14d09
SHA256

9f99353597e506675cc35a4f291d4d40b03e0d90df0de3f366112db5b07c82fa
SHA512

e4097ec7993a38884e0396706b2392727bb1ca3fc3f885ee5b16e4ffffa23bc8d9abe9aac88922a0fe931f9a7a82ffbfd0bbf4dbe7f8480a2dd97c05359d38ac
SSDEEP

1536:gZuQGzG6N20zllN+Xi5y6BDv1n7RKKy0txCsJPoHkj4+YdesImrMIoqItcVthl:1ElQLd7UKBCs2EM+YkswcItOP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e2c2997f891b4e3adc325390822f34d_JaffaCakes118

Files

0e2c2997f891b4e3adc325390822f34d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3061dfd8cabe8123c4d2e96ed230d518

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
RemoveDirectoryA
VirtualFree
GetTickCount
Sleep
ExitProcess

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ