24e177b6d89ff98004f25c223e1164d6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24e177b6d89ff98004f25c223e1164d6_JaffaCakes118
Size

111KB
MD5

24e177b6d89ff98004f25c223e1164d6
SHA1

96ed023fb5e3cc6b113229742befea5a698cc4f0
SHA256

b899e783d552fbf8330d9c890d248fc1998c8212638cb2464bb28a84a4fc79cc
SHA512

106a4d26e184d2d390bd10d2fffb98dc0723dd23067773025264884775dfa167c56779666054b6320b869267722a489b91cf8d4c58b6c39e3d9d16153d85f43a
SSDEEP

1536:7lSRRvmaxIPi7twW5OnBcAsAymDXkSpw7gFNAtbdz5F8ycii:wgEIPi7tInBNYmaoA9dtFt1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24e177b6d89ff98004f25c223e1164d6_JaffaCakes118

Files

24e177b6d89ff98004f25c223e1164d6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eccfe72a8d28c5541755d89a9dc83a6d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetCurrentProcess
VirtualFree
Sleep
ExitProcess

user32

GetMessagePos

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ