728c3e3286a473e900d035475d75e176_JaffaCakes118 | Triage

Sharing

General

Target

728c3e3286a473e900d035475d75e176_JaffaCakes118
Size

41KB
MD5

728c3e3286a473e900d035475d75e176
SHA1

a3b8b14e2763ebe65c400230d18b6b34de9f08fd
SHA256

141e3ff4d1f3fc6f4b30633687e42c5d57632a8278f3e980ef0a29239c01e294
SHA512

598626cb21e662cb1e92151c5467ca9a247addd9237fc3991e40c257f1b7a5768cc07194327a728c74aa82df04f027d8050b09ffee3de44ee1ff0898cd2d7e7e
SSDEEP

768:53a8xR7aVz3jrqIij7xj/T6erCWN1FupCwsZBFAatwnpJgU:5tP7ozJ471miTNbiuB6atO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
728c3e3286a473e900d035475d75e176_JaffaCakes118

Files

728c3e3286a473e900d035475d75e176_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c98ba29a3d0a4950b475da056ca00546

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenWaitableTimerA
GetLastError

gdi32

RestoreDC

Sections

.text
Size: 23KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rpxrhbr
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 177B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE