b950421510f8b140fb0ac2430afe8e90_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b950421510f8b140fb0ac2430afe8e90_JaffaCakes118
Size

531KB
MD5

b950421510f8b140fb0ac2430afe8e90
SHA1

ccbe77d1089952f8a8e9441fd5bf38f300aa22bf
SHA256

37042425edb403790bbce3b70f1d7704d884af7b0e8662b9552664bd2815dca3
SHA512

768d1307a8bd524fab4b468efa6e3d2529db5774afd7d9cee674ae7355c5606be5f3b3e2d739c783b7b69fce1660e49debce9071e975c0d5b3f52e2b58adcf1a
SSDEEP

12288:U8ze15I3ukFswwVCmLQ4qJCUZ1cTE+6G72DL+:Bzukcw5v1kR6GyX+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b950421510f8b140fb0ac2430afe8e90_JaffaCakes118

Files

b950421510f8b140fb0ac2430afe8e90_JaffaCakes118
.exe windows:5 windows x86 arch:x86

17cb3da9e07667463b572117ad902415

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
GetTickCount
GetProcAddress
LoadLibraryA
GetModuleHandleA
CreateThread
HeapFree
HeapAlloc
GetStartupInfoA
GetCommandLineA
ExitProcess
GetProcessHeap

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 398B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 519KB - Virtual size: 518KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ