b5800ad4f9510c5a6bf9639a347f95cf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5800ad4f9510c5a6bf9639a347f95cf_JaffaCakes118
Size

113KB
MD5

b5800ad4f9510c5a6bf9639a347f95cf
SHA1

00611d24f27a2d514642b35e112bd36f2b5ceb63
SHA256

9e051142e40c64fceca41b3417cf8082659d2dca1aa7ffd0af780fa256990eac
SHA512

99c576ae6c8675c0b0cd6e14c0926336e618e0868cc7fa57e803731c753703a196a7ac7ee41621bf1be6d3654504694fad27164aa9b91ed5e59dc3dc41f4538d
SSDEEP

3072:zkAfmAXfmAnI25LSXEo9pn3bY0Z6KRe61RGR:zkAfmAXfmA/5LDkp3bTZZk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5800ad4f9510c5a6bf9639a347f95cf_JaffaCakes118

Files

b5800ad4f9510c5a6bf9639a347f95cf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

03a261ca6f8067477bb0b85947abe994

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetCommandLineA
GetUserDefaultLangID
VirtualFree
Sleep
ExitProcess

user32

GetMessagePos

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 218B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ