35afd7bc720a5208fc3aab5a14e2adb8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35afd7bc720a5208fc3aab5a14e2adb8_JaffaCakes118
Size

348KB
MD5

35afd7bc720a5208fc3aab5a14e2adb8
SHA1

6197dad8ad3517c4e108758af47e078cb95b9df7
SHA256

33001de87ca691ac6094d6080a057262d02862dd073e0e2c3922cbec3845c42e
SHA512

a8ff0d29fe213575609801521717516f50a244d3031afdef42dbee1d78fa9fdf36d352a88e238c309a2d4c1f67ed295781a5b58bb7706922031c21f896131af7
SSDEEP

6144:rLmrjIj/RmQRcGgCHA88FmT1znUMazVWKxroMve3zXG+fbnrO+FYsofSqK+7:rljJl9HABZVvGbLjrOffSq77

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35afd7bc720a5208fc3aab5a14e2adb8_JaffaCakes118

Files

35afd7bc720a5208fc3aab5a14e2adb8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

502bb5b2fc83d0b1a10d96906c9dc24a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
VirtualProtectEx
GetModuleHandleA
Sleep
GetSystemTime
GetSystemDirectoryA
GetProcAddress

aclui

ord1

avifil32

EditStreamSetNameA

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 152KB - Virtual size: 677KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ