71a3737430c3f539e4070628d9f7e82d_JaffaCakes118 | Triage

Sharing

General

Target

71a3737430c3f539e4070628d9f7e82d_JaffaCakes118
Size

111KB
MD5

71a3737430c3f539e4070628d9f7e82d
SHA1

c590546a77a18677fba8bfcdf843dab0b697a1e5
SHA256

8c13f4dbb6bb765d3048338ce1c4b5401ed0f755030b9f49de13b9c88bfd8e8e
SHA512

7002b393e2b4d8c6d6eaa8994dae1cdf0a7497eff716150322ca72f3425985ecf9ba2a9c8725097e91af60086cfdba6f11213a7e16071ca0edb099894e53e571
SSDEEP

1536:msG1mQo5KIkLuJ5zYJdfVfhdgI/fqF3lWo2eYCjaas65lZ+YpangxL8OY+RwU:SkLKIkLuJ5OdL2n3UKjnzpagxLHYww

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71a3737430c3f539e4070628d9f7e82d_JaffaCakes118

Files

71a3737430c3f539e4070628d9f7e82d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

56f2a300090e679b994dff987b9217ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
CopyFileA
Sleep
ExitProcess

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 238B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ