a7e8187d0bc0f02351ebdf4260a3dd1c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a7e8187d0bc0f02351ebdf4260a3dd1c_JaffaCakes118
Size

348KB
MD5

a7e8187d0bc0f02351ebdf4260a3dd1c
SHA1

181c9ca43f7084add56a542b1eb47224712d055d
SHA256

56daa9cd7ab8dc6872f0e7920a3cc1fc8d00ce544b02ebaa9d7a242a3cd3d76e
SHA512

8d37c8b45397e4f1f787bee2e3cf2d193248b95aa1e2b73d2dd34490ce208579a17236ba979acf2c5c57c6bb3715bd376a0755e5d15c3e16e3135d9c267f9c4f
SSDEEP

6144:BLmrjIj/RmQRcGgCHA88FmT1znUMazVWKxroMve3zXG+fbnrO+zYsofSqK+7:BljJl9HABZVvGbLjrO1fSq77

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7e8187d0bc0f02351ebdf4260a3dd1c_JaffaCakes118

Files

a7e8187d0bc0f02351ebdf4260a3dd1c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

502bb5b2fc83d0b1a10d96906c9dc24a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
VirtualProtectEx
GetModuleHandleA
Sleep
GetSystemTime
GetSystemDirectoryA
GetProcAddress

aclui

ord1

avifil32

EditStreamSetNameA

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 152KB - Virtual size: 677KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ