099afc84aa747a003fb0beb03acd463c_JaffaCakes118 | Triage

Sharing

General

Target

099afc84aa747a003fb0beb03acd463c_JaffaCakes118
Size

348KB
MD5

099afc84aa747a003fb0beb03acd463c
SHA1

d1e941ae73e71ba294111ec8dea4327aa08b4145
SHA256

525c6e89e5f766dd05aab8a43331c2118d81ee9576a1f8ac96c718d83485e894
SHA512

f19bc194a68d37ccf0ad3cad00e8d9aa083ded8e9c798a76ac3da2f689bc7680a6250e370c713b2216b3352f4dd9bd9669797a55fddde772c0d38c5fb6d2e47b
SSDEEP

768:jfUOxLDVJoo27wxmD9M2GQP3jocZKXadyKu5yoV7Sxus:bNVJy7uEM2PocNy95bXs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
099afc84aa747a003fb0beb03acd463c_JaffaCakes118

Files

099afc84aa747a003fb0beb03acd463c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e54e99b02c38bff0879cfd75a5276944

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
ExitProcess
Sleep
GetCommandLineA
ResumeThread
VirtualLock
CloseHandle
UnmapViewOfFile
GetProcAddress
GetModuleHandleA
GetTempPathA
VirtualAlloc

user32

wsprintfA

advapi32

CryptAcquireContextA

ole32

CoUninitialize

msvfw32

DrawDibTime

crypt32

CertCloseStore

winmm

midiInClose

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 188KB - Virtual size: 555KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ