ab069673042be9b8a10782198125f746_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab069673042be9b8a10782198125f746_JaffaCakes118
Size

112KB
MD5

ab069673042be9b8a10782198125f746
SHA1

78049d2dfe7b456baf2c944de395a3944a766466
SHA256

677b4517fc116f16281958a5902baf0b1be094c969e71c703c139cae14977155
SHA512

50dbec1255edf4892588562308fd41d1706a703dd25d591918c10deae9db7b381f44b9135aa0e8018f1943945581aa38bdc0184f095c1acfbfe45bb2a53d2de3
SSDEEP

1536:zxhzYzSdtRFj6hFwrlCP/oOgl/dCYGSFA8LMVai+V3zcqQLFMcv6NKPUyfT+2O0c:zMzSdpUFwrU/0dCoq8IcZoFM+t00

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab069673042be9b8a10782198125f746_JaffaCakes118

Files

ab069673042be9b8a10782198125f746_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fd45a49b5bd0352ba5996f84b45fd4a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
lstrlenW
VirtualFree
GetCurrentThread
Sleep
ExitProcess

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ