3756391d0f1321e1b0dd713935122f89_JaffaCakes118 | Triage

Sharing

General

Target

3756391d0f1321e1b0dd713935122f89_JaffaCakes118
Size

113KB
MD5

3756391d0f1321e1b0dd713935122f89
SHA1

7b912874e20fa096fe11a774f0d96e6c994753ed
SHA256

a8c48c61532e0ea21744013f50ddb33a5351c70be8b9013cd186a1757018f50c
SHA512

4c990f61147f6d3a7b07efbba7cf4958a18d2f29a89ed8f06615b9ecaa297d0af1601869f4333f85039e1fcccf53ff699c47e9abb58d45c9de9f58c2c5c9eaf8
SSDEEP

3072:ANupYBgL0+QcCnIALetXffv2Tt1UPQDdFk:A+y609jfh1UPQpF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3756391d0f1321e1b0dd713935122f89_JaffaCakes118

Files

3756391d0f1321e1b0dd713935122f89_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5c185804d91e579ffeed6715fadc4117

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GlobalFindAtomW
VirtualFree
Sleep
ExitProcess

user32

GetMessagePos

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ