a718ba47524e69b0cd3e69bc401ea082_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a718ba47524e69b0cd3e69bc401ea082_JaffaCakes118
Size

332KB
MD5

a718ba47524e69b0cd3e69bc401ea082
SHA1

4d41545591da4ec6b024eb54e5b9e01dd949012b
SHA256

8d547c7d1a9f2f2acd48f30608def7092a9d1643be6662e86b467a40135dd548
SHA512

23f2295973d276a6c6e61b600536ccb847a65c6f2fb209ae6358fc8139be0c69a8053d8edaa77a383a068f7b524931d15d6cce293376b80f627062533eac9aea
SSDEEP

6144:JcCiCsBCYCiLpzqUtX5jD+BU2l7rNXJvEGolo/RuPLYJq+aZeX7LU:JcYsBJhBtZ2l7rNX9EGolYgPcS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a718ba47524e69b0cd3e69bc401ea082_JaffaCakes118

Files

a718ba47524e69b0cd3e69bc401ea082_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4972699825fff8e15361758ea504c977

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
ExitProcess
Sleep
GetCommandLineA
GetTempPathA
VirtualLock
CloseHandle
ResumeThread
MapViewOfFile
CreateFileMappingA
GetFileSize
WriteFile
GetSystemInfo
CreateFileA
GetProcAddress
GetModuleHandleA
UnmapViewOfFile
VirtualAlloc

user32

wsprintfA

advapi32

CryptAcquireContextA

ole32

CoUninitialize

msvfw32

DrawDibTime

crypt32

CertOpenSystemStoreA

winmm

midiInClose

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 272KB - Virtual size: 726KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ