83718da85c4901951ece663a36103264_JaffaCakes118 | Triage

Sharing

General

Target

83718da85c4901951ece663a36103264_JaffaCakes118
Size

112KB
MD5

83718da85c4901951ece663a36103264
SHA1

339d9ff0d1d126b944e7277c18f6607e51f84181
SHA256

46bd4e225115bfb4938c5e122d6cef1785fc419c11b56a347c1a45dcc20842af
SHA512

e00e4795d026aafe51f9524e04fd818d700b2ccd21ee9fb7584cb92373a965c79c2a2aa1c9fc2be59afae8454443a641cbb8aaf2c6209acf310e85e1af9b87d4
SSDEEP

3072:Ugqg5piTDlrMXV43Mf41WvKL8CEVd/uXP1+vDU:Ugr8TD92gJUvAfCdWXIv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83718da85c4901951ece663a36103264_JaffaCakes118

Files

83718da85c4901951ece663a36103264_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4750e2519a33f643d8bff62f7e7fc7f5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
lstrcmpA
Sleep
ExitProcess

user32

GetMessagePos

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE