35fbc431c001893fe5ba28476905ecc4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35fbc431c001893fe5ba28476905ecc4_JaffaCakes118
Size

524KB
MD5

35fbc431c001893fe5ba28476905ecc4
SHA1

2613ab679ffe853a687cdd0a7920e0ed3b8120da
SHA256

da127edfbd1e6cffe0584861c0f78a2aaa6452096371d10d29740ac24b65eef0
SHA512

b049fbb25a4a621fe48fe6f8ed2d7f9129a2c49b1f99636feff25723ccd971002b7d35f1fe97802e7315e45a16737d9a9c49e455f30b78b49cce7d00a265e319
SSDEEP

12288:ELlGN/6sVH06fi7ZHDl/F+BiB2BJpTZh8BVSjYGlLroTfnDicn1A:EpGN/68U6yBx/FRBq+VMJryvDicne

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35fbc431c001893fe5ba28476905ecc4_JaffaCakes118

Files

35fbc431c001893fe5ba28476905ecc4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f251ab29d23ebcfc88f74dd290c88a3d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
QueryPerformanceCounter
GetCurrentProcess
VirtualAlloc
ExitProcess
GetCommandLineA

user32

GetWindow
BeginPaint
GetSystemMetrics
SetCursor

Sections

.text
Size: 460KB - Virtual size: 458KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE