ae4ab972fed327107a1fe148ee92f847_JaffaCakes118 | Triage

Sharing

General

Target

ae4ab972fed327107a1fe148ee92f847_JaffaCakes118
Size

111KB
MD5

ae4ab972fed327107a1fe148ee92f847
SHA1

f8160cfdbd7f8d0a7f96c16cf9841a3318b22e13
SHA256

9eef1d86c0c5fd491ac467c19a3a0b9a8b1b93e7ace94f5256b41e7b35cfff10
SHA512

5377ce81dd0ffc4f4ba85bd97a537d3f9707d0b1167781654c21717487c2ad17b319bc57d29b3d89f1a789077f16c7f9bc3ef812fb55cf2dabef4479a0d8a041
SSDEEP

1536:1dmKiLx2YX5dFrA9B+k6t5vYvKfconwhXDJxlptbNswGfVl6Qp/MI51NWK:1diLx1C+5vjconwN7lptBs/3Uy1NW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae4ab972fed327107a1fe148ee92f847_JaffaCakes118

Files

ae4ab972fed327107a1fe148ee92f847_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e746c280437e2b25cc1bd697c8e108f4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
GetCurrentProcess
Sleep
ExitProcess

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE