d0ee5daca8c592b7fb7e47e878025b93_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0ee5daca8c592b7fb7e47e878025b93_JaffaCakes118
Size

111KB
MD5

d0ee5daca8c592b7fb7e47e878025b93
SHA1

0266553cfe822cfa961afabbbbbed3e57e78c935
SHA256

b32714962a30bcbdc366dae0d6a6fc58f22c4216db835956b66cd7bc8ea58bdc
SHA512

49cfe6ad6d621f70e3a568f0223835ad9813b2afa44d232c0fd7424c96628b8e6396ed30663fb8472643d2cc3c4a84a2f709ce497166db2e26a3e056aea1075b
SSDEEP

1536:nEf7tioFLJFaSncnWvcuv0rPCtwL2F4+lWLzrby4dCXdkTSNMLcpwsUqr58zrBIE:Ef7tiotZkNWB43zrWSCXdk7s1rWajy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0ee5daca8c592b7fb7e47e878025b93_JaffaCakes118

Files

d0ee5daca8c592b7fb7e47e878025b93_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6ac5b76ca76da88fe4ffe2d3c5729341

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
lstrlenW
VirtualFree
lstrcmpiA
Sleep
ExitProcess

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ