c0a1b6af3c6522c53f462a6fdcfbb9a1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0a1b6af3c6522c53f462a6fdcfbb9a1_JaffaCakes118
Size

112KB
MD5

c0a1b6af3c6522c53f462a6fdcfbb9a1
SHA1

3eccff03cf2b09bb47742758335be0399dd5a5cd
SHA256

308153e1fcb2b559cd3fa60e2d42e035720c7df78301499421b744c9d44c1a7e
SHA512

e251be31afa93d40c1aeead90644088b52834a5bb52d4183bc61158f0ba2de32e459b02394c88d75be3fbe19576308562a63ba20e04b2cbb8468bb88889c7afb
SSDEEP

1536:YU8DH8MiB71+VbdFAGjgwUSP2IfRgwNu5p7hdUviiGI5KbMl/kgw:YUC/cAoGM6PDgwNu5p9diHn4bM6g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0a1b6af3c6522c53f462a6fdcfbb9a1_JaffaCakes118

Files

c0a1b6af3c6522c53f462a6fdcfbb9a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5f35d20dbdc51939396c3481845dbb81

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
GetCurrentThreadId
Sleep
ExitProcess

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 238B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ