32e316385ec6f51c521e0f3ae75d2750_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32e316385ec6f51c521e0f3ae75d2750_JaffaCakes118
Size

111KB
MD5

32e316385ec6f51c521e0f3ae75d2750
SHA1

e7a335086779b47eb0c23d0aede84e0fb128a066
SHA256

a5fd8a57c0ba880be5ca88013585e5cb7d02e9394c6b95a585f16777318d7459
SHA512

0f69060bbafaf9d359c2089bca8cd7a1015d760d542e8d4bd1f5f306139e06838e2e2151f615d06c12caef4f76e7f72b003ad79d9de5e2a906cfe3221d8fcfc9
SSDEEP

3072:MswaY9NpvKAQ9C17SCQvou+la0pV/kVI:Mr5NdKAQ41jYcpV8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32e316385ec6f51c521e0f3ae75d2750_JaffaCakes118

Files

32e316385ec6f51c521e0f3ae75d2750_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9245761ad0601ef51952f6420487a076

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetModuleHandleA
VirtualFree
Sleep
ExitProcess

user32

GetDesktopWindow

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE