24429e5fb57f9ff0c15b66038aaaa719_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24429e5fb57f9ff0c15b66038aaaa719_JaffaCakes118
Size

111KB
MD5

24429e5fb57f9ff0c15b66038aaaa719
SHA1

2c794e70f9367a2df2753913eb8bbd57731642e9
SHA256

57165bea1afad6ed23e700973716a7627daaca99cf20c4a11776b747c675ad37
SHA512

8671c6970a05431a5b23fe2305d6396530513d72d024d15028deba8868362369954d11dbde9c63162865d4840867bc0a4818efb164cd99e2a9d9f4cf7deb459f
SSDEEP

1536:QRyYnDfzTI1khsBjf2GMlbCSkl/xXaWBEwGde+dHIEu/yUck/LcO5rq3:QRN3Cf21ChxKSEwGde+doEu/yKLcorq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24429e5fb57f9ff0c15b66038aaaa719_JaffaCakes118

Files

24429e5fb57f9ff0c15b66038aaaa719_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2b30d80c41d49fba3411e2ce1d9eaea5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetModuleHandleA
VirtualFree
IsDebuggerPresent
Sleep
ExitProcess

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ