7508c36654449b249d8e80a431c0d3b5_JaffaCakes118 | Triage

Sharing

General

Target

7508c36654449b249d8e80a431c0d3b5_JaffaCakes118
Size

64KB
MD5

7508c36654449b249d8e80a431c0d3b5
SHA1

be562a744faa271eed500090f4aed3c8df751b4f
SHA256

f89342309092473c454289e0c92d2b04dceb70c2e9860525ec3ac918b47c8963
SHA512

eb805b6aa784267638ea4e7299180461e28c098db97cf11ef8d71746afe1adbc438e62d81bac3ac67da44f6f068a9543dcbfedca600368ed4d8e3169cb348d63
SSDEEP

1536:mxgcNNEBmxT5XYgQijmsjvMJy5C6LMf0hS4kMEY8jzT7xKwSpDzTL3:erdXQ9sd3nS4kcOzfxupPTz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7508c36654449b249d8e80a431c0d3b5_JaffaCakes118

Files

7508c36654449b249d8e80a431c0d3b5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d0163a8e66ab142b942ee8c9fc18c877

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLCID
GetSystemDefaultLCID
GlobalAlloc
GlobalFree
GetDriveTypeA
GlobalLock
VirtualAllocEx

tapi32

lineRemoveFromConference

dsound

DirectSoundFullDuplexCreate

Sections

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE