acfb4acef469ce46c77019bfd3c593d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

acfb4acef469ce46c77019bfd3c593d0_JaffaCakes118
Size

116KB
MD5

acfb4acef469ce46c77019bfd3c593d0
SHA1

07788af7d911c9f3e8617ad58a8685d5e9469bc1
SHA256

161aaed0a8051320bab8ea9cef977e1f1d8ab09eb632cb2d24d5d40aafa95afa
SHA512

7654e34ea423d719ecf6dc89d48b234344f7ec3d2ac873405ef27d0fcdb327824589dcffb7ae66f7973902296bac7b326255c383d0fbad5c1b4b23e2d9cf44bb
SSDEEP

3072:Xk4E0OV15hapuLF5j1XpiyvGkRdxQMVBYm:lC15hKKflpiUndxQ2BYm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
acfb4acef469ce46c77019bfd3c593d0_JaffaCakes118

Files

acfb4acef469ce46c77019bfd3c593d0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

465364c54cf2b8f438e0c87deeb4ac20

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
Sleep
ExitProcess

user32

GetDesktopWindow
GetMessagePos

Sections

.text
Size: 512B - Virtual size: 254B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Pjfamw Q
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Ntikwhay
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Vvahnrin
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 237B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ