f55cb9fd34a8f6c048e8fe636986e46c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f55cb9fd34a8f6c048e8fe636986e46c_JaffaCakes118
Size

113KB
MD5

f55cb9fd34a8f6c048e8fe636986e46c
SHA1

4859406290dcd82f030ffd96363d4f8001e8094b
SHA256

cfd32f13285d1182962d098226550b9bc4f29f4b5617c70b69b7896234704c0b
SHA512

0525ca63369619ebd56b8a6d3728b7d742e456d44c96a6ab6d255bfa7dca91d5d33036a8cd4c4257ff1f97b6539393e1da0037497aa291a37298f20bf31a486f
SSDEEP

3072:0hzCisncNnqtblGuFb6Aqz0lr7H9gUJn9C:0dCisncNn5uFhqAJdXI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f55cb9fd34a8f6c048e8fe636986e46c_JaffaCakes118

Files

f55cb9fd34a8f6c048e8fe636986e46c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7b83fc3939d3424796e46bbb8dfc0ea4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
GetUserDefaultLangID
Sleep
ExitProcess

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE