b8359ef3d1cca8b0b1e41d84ece5d8b4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8359ef3d1cca8b0b1e41d84ece5d8b4_JaffaCakes118
Size

112KB
MD5

b8359ef3d1cca8b0b1e41d84ece5d8b4
SHA1

365857b3d7320568ac6a9cc7804ba6d19e47b603
SHA256

33246e840962f2c00f8db45afbc1eae094f98c9bdbd338b9783b5b7fc972b27c
SHA512

94095dc66727b26b37fa9917bd9ef42d3467366b9dd4abdd8d14385ee188d1fd777b720df30033e9f79cd715fb4fb03cbbb94961a096edc8bf78a14d9d14a913
SSDEEP

1536:owndmzIt7nB39NlMUUo9qEWLqdPiyHsdtUNQD7ycJxCh85ZEDuCFCDQtp:oydmzGd39jcrLH2sH0eycJb/C0DQt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8359ef3d1cca8b0b1e41d84ece5d8b4_JaffaCakes118

Files

b8359ef3d1cca8b0b1e41d84ece5d8b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a0b8855d9b6eb753daba64cce9393428

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
DeleteFileA
Sleep
ExitProcess

user32

CharNextA

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ