8890084a07faa4d87404e02ed7388658_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8890084a07faa4d87404e02ed7388658_JaffaCakes118
Size

132KB
MD5

8890084a07faa4d87404e02ed7388658
SHA1

fb4cac6342f77928ae62b5f0854c5c0e5cabae43
SHA256

1ee5fcc8abc2e35f0d772fbbd87990010a710b1f29b6436c02b628b5928412ca
SHA512

5a479a002c4013dcd03e40f3c931b962f0e7673583c009bb027a6c3d254580aadf3c70de502bfb90606e1ac67074f70268b9c76587f893e3d677ce6d2cbbb9ce
SSDEEP

1536:4g8R6M4TDVMVyssSHE3eb7VIWso0eujJdAr6nsQuZy5BD+oI+Rx+4T5av9:IR6MUVMYS4ePWjoNuNS2m2DhNxVw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8890084a07faa4d87404e02ed7388658_JaffaCakes118

Files

8890084a07faa4d87404e02ed7388658_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d7d47b82045ecd23662b54f4cca91ddf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
DeleteFileW
VirtualFree
lstrlenW
Sleep
ExitProcess

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE