a653e291f7893328379813a59f5b3ae1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a653e291f7893328379813a59f5b3ae1_JaffaCakes118
Size

112KB
MD5

a653e291f7893328379813a59f5b3ae1
SHA1

b9840b45b90014ff65c38a855d4ec51ee4320aaa
SHA256

71703289ba36ad8f192e538bc30e9b0f8d0cb716b4eaa55ab00bb3eb2deb9b5b
SHA512

a7286659f03fcd7e9e1b53524e529e0a02752cc464e98cc53d524ffc79097d96765202322b89cdb3687f134ec193f0b896c12b3ba1e757bc1c42d8cae90b2996
SSDEEP

1536:fX5botq3gyOFFf3+k56T0zDofOsZ+S1Hgzjlrxpzr/UoLJqtkJD:fXZmhLf3+k5Q0zDNsES1HqxrfVNqtO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a653e291f7893328379813a59f5b3ae1_JaffaCakes118

Files

a653e291f7893328379813a59f5b3ae1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

de874d0a802eec8d858b31821a3022b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
Sleep
ExitProcess

user32

CharNextA

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ