15fc1725f63e83d764138860de240fd6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15fc1725f63e83d764138860de240fd6_JaffaCakes118
Size

113KB
MD5

15fc1725f63e83d764138860de240fd6
SHA1

ba11a52eb6b049e7b6caffb66f7a685d2c0ee26a
SHA256

b20235dbc04dc1efe83140a5470e47cefa58f9c53aa5e3c80388cc912375b39f
SHA512

163db32aed4014ba0924e5ca298ddcd9c98054088333b3dbc52f56053205add41c542498e03ca789fdeb94aad05d69421944d239978dedcd5e757d33dd877dbf
SSDEEP

1536:PtWNmr1R9zm28J50SUIUaHFZQ6WXSLF3MJdlQE1BwhutFVTNwuTM:PtvbwJRKAZFWXSLFcJdlQEwuTGq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15fc1725f63e83d764138860de240fd6_JaffaCakes118

Files

15fc1725f63e83d764138860de240fd6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

28b40b78689be7e83ccca2ff02354d4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
Sleep
ExitProcess

user32

GetMessagePos

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ