451f7fdc229ec2ae1cd1be1fc8108cef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

451f7fdc229ec2ae1cd1be1fc8108cef_JaffaCakes118
Size

112KB
MD5

451f7fdc229ec2ae1cd1be1fc8108cef
SHA1

c3120b0b4d36163f22713de0a961351ce8b97123
SHA256

6b99be4d41d4942d463e3f28e475b8d7dc65d2f6e16d38daa5e408679e0d0a76
SHA512

5c64c71f0fa6c5d6e709847cbdb5f49089f05274b747fab7a958ff83b740f30d600424bd21b27961fd2e25c3cf06d8d057c0964dc1b8557253c92d2f94e988a6
SSDEEP

1536:4q1w814M8KVTnTbeSya2IFkV4NGmz+iSmbi12H8x3Uyd:4q1BVDnqa2IFk6NGq+iZiIH85L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
451f7fdc229ec2ae1cd1be1fc8108cef_JaffaCakes118

Files

451f7fdc229ec2ae1cd1be1fc8108cef_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f9bdc7581b2a28d288530907b9a39f21

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
Sleep
ExitProcess

user32

CharNextA
GetMessagePos

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ