70c7042c60958531c5a27afc552e45e4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70c7042c60958531c5a27afc552e45e4_JaffaCakes118
Size

76KB
MD5

70c7042c60958531c5a27afc552e45e4
SHA1

cd883c2b07d70a03b4fd26bba2e029d77bbbda87
SHA256

a3d058c501e5c9eb4a716c258d0806cd507dca2ecae830a64775d899a2cc87e3
SHA512

4ed2b3a06cb9eaf0dd175f2a6bffe095b3895ad4141ed3147687a345bb58a38c4ed49c4e66a7f3c786846d3435a1b240cc2d41af6c0bcc887ad81341c44d88af
SSDEEP

1536:NN4QQZzx5Rk7KGzm4lAVlokpqyjGjvrdVr:NNQx5UKxUuqtyjodVr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70c7042c60958531c5a27afc552e45e4_JaffaCakes118

Files

70c7042c60958531c5a27afc552e45e4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1c706c6f67b7d173b6ab503ee04d3cd1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateThread
GetLastError
CloseHandle
GetModuleHandleA
GetFileSize
CreateFileA
Sleep
GetProcAddress
VirtualFree
VirtualAlloc

netapi32

NetDfsRemoveFtRoot

avifil32

AVISaveOptions
AVISaveOptionsFree

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 205KB - Virtual size: 560KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ