a77422902785a4052ec49cb512c125b2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a77422902785a4052ec49cb512c125b2_JaffaCakes118
Size

112KB
MD5

a77422902785a4052ec49cb512c125b2
SHA1

fe4a1cd1505c18b9914a55112ab3a072d0a43413
SHA256

1836c0547da31ab04c8df4fa92b42aec7dec62454c17185886676fa6ff736ea3
SHA512

c11af55f33dbd26a914536314eb03043131613c882fe552e8acc6239acd72eb306ea5f4dd872cfd500cf205d33ce076538e7c0951cc63b98c3bfe22512740696
SSDEEP

1536:PwgcIOBEa1MaxiQnYoxvhmiDiv1ebBMSA0vlfHJ/TCng/28YsS9wQd0:PaOsYILBMSA09PZz6sSSg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a77422902785a4052ec49cb512c125b2_JaffaCakes118

Files

a77422902785a4052ec49cb512c125b2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a00cd09d25d0548ab215fc9e010facf8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetCurrentThread
VirtualFree
DeleteFileA
Sleep
ExitProcess

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ