ac8bd8c228a3613a0312e66b180b7f51_JaffaCakes118 | Triage

Sharing

General

Target

ac8bd8c228a3613a0312e66b180b7f51_JaffaCakes118
Size

297KB
MD5

ac8bd8c228a3613a0312e66b180b7f51
SHA1

4cae7be2692f7012af8d8734148436d70cd8525f
SHA256

a4b5a2d044b08fbb99f4190bbec997e8a582f3aa4a29f4535628ac28f187dc58
SHA512

24710e71720715392abefe6e46cd98d8fd6de07db92e8b7d6d573c1e09e4ee8c506ae9bd87f86166d6bc70a106af522196477b5a1b18467d4352007f3dd3eba0
SSDEEP

6144:DFZ8dOv1I8Q+VuKa+Ubgqy07TDwK9mMsYlW+KifOErXU3B4:D0Ov1g+WVcqyul9zrW+KF/3B4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac8bd8c228a3613a0312e66b180b7f51_JaffaCakes118

Files

ac8bd8c228a3613a0312e66b180b7f51_JaffaCakes118
.exe windows:1 windows x86 arch:x86

3b20b19e4cd8b46bdf0a003e24b9fbf2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeFormatW

user32

DefWindowProcW

Sections

.text
Size: 281KB - Virtual size: 460KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ