7193fedc66896b90055c24bb76ccbc96_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7193fedc66896b90055c24bb76ccbc96_JaffaCakes118
Size

328KB
MD5

7193fedc66896b90055c24bb76ccbc96
SHA1

9a3cf7cafedc1bd4fa432954b4a9c7e1447b3b18
SHA256

7463900f0574a1374dcb28b1339513e72f95b040c3544c6a503aa8979d32bf03
SHA512

eb545e485356266320d5957aff65e5205aa79c6c5ebfe77a4ded4857e53f2ad20600fa37cd6b444a3459ac0c809c54e433bca62f2c0d8a82983e4a8abac7ba91
SSDEEP

6144:cXu8bnnZReZiu7JTwwma6gAs1Xn0VnnfElfWYI+pbzq8:j8+JTf91AEnOfVopC8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7193fedc66896b90055c24bb76ccbc96_JaffaCakes118

Files

7193fedc66896b90055c24bb76ccbc96_JaffaCakes118
.exe windows:4 windows x86 arch:x86

502bb5b2fc83d0b1a10d96906c9dc24a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
VirtualProtectEx
GetModuleHandleA
Sleep
GetSystemTime
GetSystemDirectoryA
GetProcAddress

aclui

ord1

avifil32

EditStreamSetNameA

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 184KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 472KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ