34ebaca27d1569a55d1e4c2a7ccac1f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34ebaca27d1569a55d1e4c2a7ccac1f9_JaffaCakes118
Size

111KB
MD5

34ebaca27d1569a55d1e4c2a7ccac1f9
SHA1

b8ef0c2d33475018792ac998af37495156802a24
SHA256

89ebb20caabc10f4c209c34545b0e2887d0b36e366f9bcf43e0c035dcdbdaf8e
SHA512

6a0c6a1ec49facf8cafa2326dfe044b35449d226a0926a52713bba5a733d369f2cf0ca4f3c5a4d367258ae6f76aceff9f168d19e440929e974e417f1343e55c9
SSDEEP

1536:hCtieTTEinRJguzLaMX5J7PdwBA6FJ+300VxTDwjsnnaUA4ZB8:hCtie3EiRJnLaAJzO66FJfsnaUDB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34ebaca27d1569a55d1e4c2a7ccac1f9_JaffaCakes118

Files

34ebaca27d1569a55d1e4c2a7ccac1f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c8afd0fda879c604b6eaaeba6dc64589

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
Sleep
ExitProcess

user32

GetDesktopWindow

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE