e1bd78069dff3e97c7b45f3ee7a55bbf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1bd78069dff3e97c7b45f3ee7a55bbf_JaffaCakes118
Size

130KB
MD5

e1bd78069dff3e97c7b45f3ee7a55bbf
SHA1

5f2bd3d30552158735ffaa443c793428cfeaaf91
SHA256

6035682e33365937fbecdf4e06c761c24a9bd66f8c8bb2549602a8bcc18c5c35
SHA512

53e04a295b7ae3835cfc7ccc116ecd0f5cfa316ee59f98f16f79630e8c8dd9d99830b65d1b02404d36d29d8cbecebeb0149bf9ee0140c4d07ebf213d3aa1acb1
SSDEEP

1536:uT2eN92Yd+9rCvFvSydIvvKWjuVTa5lp1TabaLUeAzklqbUjEBimcmgv15sbemQb:uCeNq6SzqTWdceqopldSi9Nuysd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1bd78069dff3e97c7b45f3ee7a55bbf_JaffaCakes118

Files

e1bd78069dff3e97c7b45f3ee7a55bbf_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9916e52b67b6f4f31ddae77847900239

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetOEMCP
VirtualFree
Sleep
ExitProcess

user32

GetDesktopWindow

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ