a75107b7508eea50e070810dc25e4ce9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a75107b7508eea50e070810dc25e4ce9_JaffaCakes118
Size

428KB
MD5

a75107b7508eea50e070810dc25e4ce9
SHA1

b0a0655ce97d7da2af9a3d72913c7375dad66a87
SHA256

1e5bf724a0e7bf470f94a58ba637ff5432d0215d97f8e9242851cd7b4f62876c
SHA512

9d9f8772aa66d37918501af04baebae2d6920f87422c48c0de637410b92d2767aa103ab35474939de928a3dd9193b41e78439b47457601f8beda9ca1fa100f6b
SSDEEP

12288:crCn23oA7OPvIWqFGK3L+CAhyrJYjzuDdQjk/O1I:8JhSYa4Ks8djk/O1I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a75107b7508eea50e070810dc25e4ce9_JaffaCakes118

Files

a75107b7508eea50e070810dc25e4ce9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4644a3a6a6a9203e9f7a5d6738317176

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
VirtualFree
ExitProcess
UnmapViewOfFile
lstrlenA
GetLastError
GetModuleHandleA
CloseHandle
GetProcAddress

user32

wsprintfA

ole32

CoUninitialize

avifil32

AVIStreamCreate

crypt32

PFXVerifyPassword

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 777KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 292KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ