34ab0687b152dc6b5791f89c3e0a4425_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34ab0687b152dc6b5791f89c3e0a4425_JaffaCakes118
Size

16KB
MD5

34ab0687b152dc6b5791f89c3e0a4425
SHA1

605583f67736b9a6f877e4f6a611ded10bb5edfa
SHA256

ccb253bf07af2457992f97f40e61f10b1c601cef3cecd262c21b58d4d57c4d97
SHA512

b5f3748a46b9a9f32f163602fed6924e913f1627b62825720e33fe09491eb74c5d4a605495ae30fd31856d5dc47202a580e2f7108d1416f281e06ed5c1d146cb
SSDEEP

384:SZT6WZs83ji+0nR716WOiZIxnovDS6M0GsUDOb:0T6ZGjcnR7161iZoovQgsOb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34ab0687b152dc6b5791f89c3e0a4425_JaffaCakes118

Files

34ab0687b152dc6b5791f89c3e0a4425_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2293bea82c3baad131e672d4a66d881a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
GetUserDefaultLCID
GlobalFree
VirtualAllocEx
GetSystemDefaultLCID
GlobalLock
OpenEventA

tapi32

lineSendUserUserInfo

dsound

DirectSoundFullDuplexCreate

Sections

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ