d29a324fe6fcba706fcc83478eaf4938_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d29a324fe6fcba706fcc83478eaf4938_JaffaCakes118
Size

112KB
MD5

d29a324fe6fcba706fcc83478eaf4938
SHA1

b7eae5fc84ef9c76a6a7d3209ee075f6bcd0446d
SHA256

76bc706c8a24ee904f3b7643ff3ec315fefa3f3acfe45add33ae01cc8f073bbf
SHA512

2f30fc1dacb4da158e16b88170ad0d332fdf90decc2d1ed1d5728f335dd19a1b7eb8625a1d90a6d4062a5a1ad69ac02c89743644b933336ed5ac5bbc1aec3d2c
SSDEEP

1536:6Nlv+JXX9sAabzTVBKkd5ec08+u6mORvuGsmuHNA5RFaa7n2VAHhD:6Nl2Jn9szvfKkd5eZW2vumH5R9n+AHl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d29a324fe6fcba706fcc83478eaf4938_JaffaCakes118

Files

d29a324fe6fcba706fcc83478eaf4938_JaffaCakes118
.exe windows:4 windows x86 arch:x86

38813ab6776c168a470ca5ece411f75a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetCurrentProcessId
VirtualFree
Sleep
ExitProcess

user32

CharNextA

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE