46526ead205c624c95fd421e3bef89e9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46526ead205c624c95fd421e3bef89e9_JaffaCakes118
Size

332KB
MD5

46526ead205c624c95fd421e3bef89e9
SHA1

ae916501daa25a0519190c6aaa8e23f0ef3584f8
SHA256

3d665d5fe5471993b0880aee80216645a20f2c995d6afd1678e5bb28c6fd34ad
SHA512

32ff34850a93cd5b1ab0cdd195cf49cdbf78c04a964b6014d98969609a48985ace6ba32a33366d6c588641dce7139da4874e421018e085d6b859eab3ab93ad67
SSDEEP

6144:3BQ7Bu1iCbVYY7AVt8T+JCiQtCHm1WqAXcC9rovPyzr:3BQ7BqiCbiYkTCoHbxc8roCf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46526ead205c624c95fd421e3bef89e9_JaffaCakes118

Files

46526ead205c624c95fd421e3bef89e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

381b7efe74f4f9b0dd95d5522651e330

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResumeThread
GetLastError
ExitProcess
GetModuleHandleA
GetCommandLineA
GetTempPathA
VirtualLock
GetProcAddress
Sleep
VirtualAlloc

advapi32

CryptGenKey
CryptAcquireContextA

ole32

CoUninitialize

msvfw32

DrawDibTime

winmm

midiInClose

Sections

.text
Size: 4KB - Virtual size: 980B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 580B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 554KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 212KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ