b486400c96de9432e367b70ba5a60e37_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b486400c96de9432e367b70ba5a60e37_JaffaCakes118
Size

111KB
MD5

b486400c96de9432e367b70ba5a60e37
SHA1

f01dd71c757760cae03387174ce6058ba701b052
SHA256

3443c7ec620912f9622fa7273a20330efb64ce718d7660b46c39b48a76b9cc86
SHA512

b2640d164ce11db3f05a76368199b99c7921377605d058b5387d35bb3d7c78db1ab8e081a3fe6944684cf3f55156e6ff599c1e587a9ba24587c13d52c9d8d3f2
SSDEEP

1536:1Cz63T3sB6tXQ/h91rTLZl1rfgHRA1ZR7EnFv8bnNOxA/D2U3dfE1hGc:1Cu3T8cSTLx1zwYZ/C8dfUG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b486400c96de9432e367b70ba5a60e37_JaffaCakes118

Files

b486400c96de9432e367b70ba5a60e37_JaffaCakes118
.exe windows:5 windows x86 arch:x86

36e8df4802658ed39d283dcfa613b7c8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
GetModuleHandleW
Sleep
ExitProcess

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 254B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ