870482dabfb9327d862e6498a7196a9c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

870482dabfb9327d862e6498a7196a9c_JaffaCakes118
Size

64KB
MD5

870482dabfb9327d862e6498a7196a9c
SHA1

03e1dedb05c446fe72a54404c1165f0610a4d6f8
SHA256

2007e31edb9374d11149be308bad1aa48bb66586c07985fad9669981ec23fa04
SHA512

746947a400c8955113cc0bedaf53b994dce33da39f642dc3e1d00b0ea920ed877cd512a2c1428b6683e576675f6b88aa99edf0987eb2958dd18e9b022c8677b5
SSDEEP

768:5m826Iw7135U04S2+Wng7WW2s4Fftrveynla1oUIfha9rRTuCtAEKUIzEZ1lEAW1:5m8NnUV02rFBjltUIfzCtxEn3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
870482dabfb9327d862e6498a7196a9c_JaffaCakes118

Files

870482dabfb9327d862e6498a7196a9c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c1a3bb6b8caef4905a6cc2e1a2d3e9da

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalLock
GlobalFree
VirtualAllocEx
GetSystemDefaultLCID
GetProcessShutdownParameters
GetUserDefaultLCID
GlobalAlloc

tapi32

lineSendUserUserInfo

dsound

DirectSoundFullDuplexCreate

Sections

.data
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ