f6741bc1febde9a74b10b827559491c3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6741bc1febde9a74b10b827559491c3_JaffaCakes118
Size

15KB
MD5

f6741bc1febde9a74b10b827559491c3
SHA1

c5d2ff3b8827432fbf15a4e63df7cbb9375d75d4
SHA256

e58252a0368b6cc95d006dd4707d136a493930e845add6e4361c50b5ab07a405
SHA512

c4d4cdd280f587cee220d791f06ba0b3409e827156c33f26a5037eeed2f8e46ba3ff9c015ba4626ee725907daa4e71588d19a2dccd3525d66eedf4e8b834fa14
SSDEEP

192:f28eqmCh8k+xbjQGIntKUlD+5wDWG9X9247nHt6OQgBqP:f2QmChNQgTt1ykWsX9T7nHXQgBk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6741bc1febde9a74b10b827559491c3_JaffaCakes118

Files

f6741bc1febde9a74b10b827559491c3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f95d70f9099285784110e42c04c96cb3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
FindResourceA
GetProcAddress
LoadLibraryA
LoadResource
Sleep
VirtualAlloc
VirtualFree

Sections

.text
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 266B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pvrjqwo
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE