f9276a721a1ae294946ce981a8aea9fc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9276a721a1ae294946ce981a8aea9fc_JaffaCakes118
Size

37KB
MD5

f9276a721a1ae294946ce981a8aea9fc
SHA1

573bd0f5fa0450e780e7b8868c73aa967913334b
SHA256

42bda75f1b771f368f98803970c434d0beec93ff0d28ae97bdad649714da19a7
SHA512

3e485157466ff93a43cfb60bdb06928a2bb81401d14a44bdd64d99f20168be80e314e6850e8d07ed88be04295e45e367774804b987d149ad502f3b62996ae490
SSDEEP

768:TG5HIdoHIFCFWEVdDhlt1KfT0qOB+Q7lG5HIdoHIFCFWEVdDhlt1KfT0qOB+Q7g:TnGYEVdDhlLeYN7lnGYEVdDhlLeYN7g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9276a721a1ae294946ce981a8aea9fc_JaffaCakes118

Files

f9276a721a1ae294946ce981a8aea9fc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0327ad71b4c0a0bec0698a10477e154f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomA
CloseHandle
CreateFileA
ExitProcess
FindFirstFileA
FindResourceA
FreeLibrary
GetCurrentProcess
GetCurrentThreadId
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetTempFileNameA
GetTempPathA
GetTickCount
HeapAlloc
HeapFree
LoadLibraryA
LoadResource
ReadFile
SetFileAttributesA
SizeofResource
WriteFile

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 161B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ