bae4ebd1ed97685724b216b3c7b69b37_JaffaCakes118 | Triage

Sharing

General

Target

bae4ebd1ed97685724b216b3c7b69b37_JaffaCakes118
Size

10KB
MD5

bae4ebd1ed97685724b216b3c7b69b37
SHA1

f662d89d81e8c15b8e9662fbbe20adea07b767ae
SHA256

23b87476467a4f3e28b6fadd4ccdc72c7afadadebb440aaeaa1f61f6edbdec11
SHA512

faf756edba62268a71083162cbc940046ca8c4c8f785a030658e36a49f7d4a884e9dcc81aa35d83000fabdd39f6f2b19118868e7823bc7cbfa486685dfdeddfe
SSDEEP

24:e1GScWReydxjrZhlKyhwP0BbKaXg5yS87p/ZM46/DR9CeCcGCeKgi/BMiyldhQZ/:SiWj5q6b3p/qH/3Cc68/BMnhSxI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bae4ebd1ed97685724b216b3c7b69b37_JaffaCakes118

Files

bae4ebd1ed97685724b216b3c7b69b37_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b90c291c5596cbf2f64c2d50268b794c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
ExitProcess
ResumeThread
GetCommandLineA
VirtualLock
GetModuleHandleA
CreateEventA
GetProcAddress
VirtualAlloc
Sleep
ResetEvent

user32

GetParent
LoadIconA
LoadCursorA

advapi32

CryptAcquireContextA
CryptGenKey

ole32

CoUninitialize

avifil32

AVIStreamBeginStreaming
AVIBuildFilterA

msvfw32

DrawDibSetPalette
DrawDibBegin

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 534KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 192KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ