95027193eb713f4c29f1130850c6aa56_JaffaCakes118 | Triage

Sharing

General

Target

95027193eb713f4c29f1130850c6aa56_JaffaCakes118
Size

404KB
MD5

95027193eb713f4c29f1130850c6aa56
SHA1

0970a3a17a2ed7c5de16396938a842e3918a6d17
SHA256

d7a16ba04079c04b64a69f039869b3b2128c984ab0581d602a49e6a5ca1d3841
SHA512

70a28dc38ae33fa2fa8aa2244f9a6b382774b9d44f123f14e4201b41c3db226d2c6c0481caee216681bb167973d4e1cacf75c7dc2d468ba68fccce21b51ea868
SSDEEP

6144:sRkOJE/laVc/KPn4ETcR+ftjqvzamjCZ7tCao6R+pqT:WkOJE/liciP4IHtjqvWDPCah

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95027193eb713f4c29f1130850c6aa56_JaffaCakes118

Files

95027193eb713f4c29f1130850c6aa56_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1c706c6f67b7d173b6ab503ee04d3cd1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateThread
GetLastError
CloseHandle
GetModuleHandleA
GetFileSize
CreateFileA
Sleep
GetProcAddress
VirtualFree
VirtualAlloc

netapi32

NetDfsRemoveFtRoot

avifil32

AVISaveOptions
AVISaveOptionsFree

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 300KB - Virtual size: 699KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ