34bbacea5b6b275f4b2d9eacc9ae7132_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34bbacea5b6b275f4b2d9eacc9ae7132_JaffaCakes118
Size

112KB
MD5

34bbacea5b6b275f4b2d9eacc9ae7132
SHA1

ed1301f57ced3a91f25287c9414a119edecd6af1
SHA256

244209a42f74a543e6027b3a51f0f0488435e3c16b012add847c9ca76233a170
SHA512

1390d43feabfed0ace2cbfbb0460dba8e59b52f38f24287a517dbfabccd98ff83a4e9187d24178ebb8d326d14bfcc9f378464ca357c0ceb6bffb5ffc3645b067
SSDEEP

3072:QncMeeARml80qXbW+1f9sdiXFSmmzK3PEAo:EeeARml80wbRf9emmzK3PP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34bbacea5b6b275f4b2d9eacc9ae7132_JaffaCakes118

Files

34bbacea5b6b275f4b2d9eacc9ae7132_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8587b7f54513f692a20cfeb5c3742c5a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
GetTickCount
Sleep
ExitProcess

user32

GetDesktopWindow

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE