771d4fa04943864a8ab4794fc069733e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

771d4fa04943864a8ab4794fc069733e_JaffaCakes118
Size

336KB
MD5

771d4fa04943864a8ab4794fc069733e
SHA1

d2344efe070650972bbb81bf4028e4c8da86347d
SHA256

c3e335e864119a9140462707891ce156df5bba3f8f3577c34aa9037b9ff2205d
SHA512

35dc0d40351ad34feb6ba35e2445ec6b63710a1f8c078e2953c18784f35853e47987c999e27903351ab673bc9eb5a09c57972b583acb33351b7a0c23c5e6fc9a
SSDEEP

6144:75vdHrsgpUR+KHr31UtOijsyKAEx4Df9WBs8kcMlCQR5ZZ:7NdhpKHbiVg/AEx48nqln

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
771d4fa04943864a8ab4794fc069733e_JaffaCakes118

Files

771d4fa04943864a8ab4794fc069733e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4644a3a6a6a9203e9f7a5d6738317176

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
VirtualFree
ExitProcess
UnmapViewOfFile
lstrlenA
GetLastError
GetModuleHandleA
CloseHandle
GetProcAddress

user32

wsprintfA

ole32

CoUninitialize

avifil32

AVIStreamCreate

crypt32

PFXVerifyPassword

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 641KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 200KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ