a01c415511852964ce19bf9fe3ad4e61_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a01c415511852964ce19bf9fe3ad4e61_JaffaCakes118
Size

336KB
MD5

a01c415511852964ce19bf9fe3ad4e61
SHA1

a52f76698a683e9c1ad966429de577334bf91f96
SHA256

737bd3e8447ebfa0421fd364d10de26671a1c01d07188b76e1400f9225988b57
SHA512

8df611b3979a64c34be200ab7993d85f98b286629620c43c7b3238c5fd5c0c8e4f2cdf759274137edad883b86fd9f1097779a34bcb41fa24b1aa271dfdbf1c11
SSDEEP

6144:8M3znlo0v7RIBnIyUh6wBjvicoJwvLxVJ8vtuvFVsP6fcpeGTazU4sn:8MrRzRIBnBwx6c0wNVJ8kvFlf+eGubsn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a01c415511852964ce19bf9fe3ad4e61_JaffaCakes118

Files

a01c415511852964ce19bf9fe3ad4e61_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1117bf0bc03b58c7614eae76ce5949b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
Sleep
GetLastError
ResumeThread
VirtualAlloc
TerminateThread
GetProcAddress
GetModuleHandleA
ExitProcess

user32

LoadCursorA
EnumWindows
GetWindow

advapi32

CryptGenKey
CryptAcquireContextA

ole32

CoUninitialize

avifil32

AVIBuildFilterA
AVIStreamBeginStreaming

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 280KB - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 378KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dbg
Size: 4KB - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ