1abbbb9d7e8642bd312c06c712274acf_JaffaCakes118 | Triage

Sharing

General

Target

1abbbb9d7e8642bd312c06c712274acf_JaffaCakes118
Size

112KB
MD5

1abbbb9d7e8642bd312c06c712274acf
SHA1

91762e48da8835061d1762740cea3b43bde30bec
SHA256

01065a28a0b09f50110427038983c6e94bde69571c6fe06487a57af59929174d
SHA512

04ae790d1d00ab6bf13d527eb5f3f95e507047d74a3cc9f3622aed19425361e1d056dc8541243721393bdf7b8acf4790bfebf0fe40bca9dc6e39912d8e691707
SSDEEP

1536:R/0aAO+N6j3fLrqFZ9HjGScQg8DXwOIwls8PnxUS3onRjvw+e7hBU:BAYj3fLrqbIScQg4gOs82SonRrwvhB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1abbbb9d7e8642bd312c06c712274acf_JaffaCakes118

Files

1abbbb9d7e8642bd312c06c712274acf_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7408e5af9fecf3a930f28aec6ccd6b55

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
lstrcmpiA
VirtualFree
Sleep
ExitProcess

user32

GetMessagePos

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ