7063ea7cfd334446d9bfaff74b76b8b5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7063ea7cfd334446d9bfaff74b76b8b5_JaffaCakes118
Size

113KB
MD5

7063ea7cfd334446d9bfaff74b76b8b5
SHA1

2db24bc09fc89a4b091b784354ce651a41782b1d
SHA256

c2f92fd72f3f7931e34d1761d3f2973b9b90e731bfd425d6c0107f37de98bfcb
SHA512

69e1f1774faca9afc3086654fb21dcb0722fbdf6552999b8ee7f1a49ab33abfa878af26357398977bd0121da84e9cbe13d18913ab1104f4aa158116339752b51
SSDEEP

3072:g+KgMqwHKL91UVAYx0p0xXHuxClgcg8YthWw/pRCSTvn:g+571USYGp0xXHuxCjgR/pN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7063ea7cfd334446d9bfaff74b76b8b5_JaffaCakes118

Files

7063ea7cfd334446d9bfaff74b76b8b5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6573c483cc32c566e594d533db749804

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
lstrcmpiA
Sleep
ExitProcess

user32

GetMessagePos
GetDesktopWindow

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 234B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ