f516ac0a9856e1cf116f7d487aaf784e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f516ac0a9856e1cf116f7d487aaf784e_JaffaCakes118
Size

3.8MB
MD5

f516ac0a9856e1cf116f7d487aaf784e
SHA1

587624218807ec8380cc4e7f1ee0dd38bbd7acdc
SHA256

31146b3a258ee052d472d39f389234bddddfe4f7a3772ffb7d3abde2c3d96ba3
SHA512

b3af1fc71cb53710510775a305549c22ac2c8f2f98d4217aa4fbdcb3e11230df050e219c69ec56c3da6227c91498d28fe16b061460a3b8e74f104023bd28b7dd
SSDEEP

98304:NWKKCKze+ayXKD+KtiqwJ4qQHfAC2pVI7DnPjOF5+P:NcgyaaKW4Yc7DnbcYP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f516ac0a9856e1cf116f7d487aaf784e_JaffaCakes118

Files

f516ac0a9856e1cf116f7d487aaf784e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6d89569a1236d0970ea987aabfe6d856

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
UnmapViewOfFile
GetCurrentActCtx
CreateFileMappingA
VirtualAllocEx
OpenFileMappingA

user32

BringWindowToTop
GrayStringA
EnumThreadWindows

tapi32

lineMonitorMedia

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1.7MB - Virtual size: 7.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ