157f69380c141601c8be4cfb231a11f0_JaffaCakes118 | Triage

Sharing

General

Target

157f69380c141601c8be4cfb231a11f0_JaffaCakes118
Size

404KB
MD5

157f69380c141601c8be4cfb231a11f0
SHA1

220eacd2d79bbfd27e4d9388ebb60a4a24daf556
SHA256

dffdf0fbb3a7d57e91662e7219845858df80ced290a688901e22b86c5a05df19
SHA512

6763759116a5a06d807534a582de7c4b44cf81dba73b0af9f3e3541a63cb801e273ad81d2e0c14be5b8046e0a5acd62314923a5fbe931219a76d04e1225c376e
SSDEEP

12288:aKKyW8ceVzBnEm29mgid3HfjW0uomVg8T6ZJ7b8es:aB8/BnECBljWPzfU7Fs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
157f69380c141601c8be4cfb231a11f0_JaffaCakes118

Files

157f69380c141601c8be4cfb231a11f0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1c706c6f67b7d173b6ab503ee04d3cd1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateThread
GetLastError
CloseHandle
GetModuleHandleA
GetFileSize
CreateFileA
Sleep
GetProcAddress
VirtualFree
VirtualAlloc

netapi32

NetDfsRemoveFtRoot

avifil32

AVISaveOptions
AVISaveOptionsFree

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 300KB - Virtual size: 696KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ