70f0c32388586c23e884f720cdaab454_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70f0c32388586c23e884f720cdaab454_JaffaCakes118
Size

27KB
MD5

70f0c32388586c23e884f720cdaab454
SHA1

1ff57ee98268286f333abe6677fd0240e2a5f251
SHA256

0416e0424b00395a5b7f67b7c913d646b2af684c11ff34060241696402c302be
SHA512

744997939f7d0f5e0b8cd9f8d5bf35ae66b2211eb7aed3bc63f22c01bf7facb3a3ed05becdf6d083a9e933e920d86e817ddd2f14173fdb308ba885836928f962
SSDEEP

384:6Kwj/SZ5TpXeOGi7oh4JrGlsXdA3uuXcTfT+yV:bweZLOOn1NGlsXoZXkT+M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70f0c32388586c23e884f720cdaab454_JaffaCakes118

Files

70f0c32388586c23e884f720cdaab454_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b90c291c5596cbf2f64c2d50268b794c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
ExitProcess
ResumeThread
GetCommandLineA
VirtualLock
GetModuleHandleA
CreateEventA
GetProcAddress
VirtualAlloc
Sleep
ResetEvent

user32

GetParent
LoadIconA
LoadCursorA

advapi32

CryptAcquireContextA
CryptGenKey

ole32

CoUninitialize

avifil32

AVIStreamBeginStreaming
AVIBuildFilterA

msvfw32

DrawDibSetPalette
DrawDibBegin

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 534KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 192KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ