a136752a48ee68db2c57444a367ef256_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a136752a48ee68db2c57444a367ef256_JaffaCakes118
Size

112KB
MD5

a136752a48ee68db2c57444a367ef256
SHA1

a6ebd8f1251e5286bacd33500cd5f85c68acb085
SHA256

7211f91a73431988ba81bcee525601418c8f0a9fd33989ad298e66090b8d1f14
SHA512

ad89f639eb1e9c8661bfceb828dc2a5a73264233a0800812a85b11330de2b35c6384ce56cb862d2ec4629184c3f3f21093f756473eb37188fc34dfd833b5799a
SSDEEP

1536:T3DtdYLXOxhxD1g1SW55srqfwTfm2zV5+pLFY/hAYqlmRqVb0sksf:L9DQSW55OqYJV5uZY/hAYqeIb0rs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a136752a48ee68db2c57444a367ef256_JaffaCakes118

Files

a136752a48ee68db2c57444a367ef256_JaffaCakes118
.exe windows:5 windows x86 arch:x86

070bcce4b54997f4fdc1c3c2005dca5e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
GlobalFindAtomW
Sleep
ExitProcess

user32

GetMessagePos

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ