a1ae09d083a26f26bc90c1f90dd760ba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1ae09d083a26f26bc90c1f90dd760ba_JaffaCakes118
Size

7KB
MD5

a1ae09d083a26f26bc90c1f90dd760ba
SHA1

2193579703e07a6cb61483f801df6245ed4c5fff
SHA256

e15e7d03227dfe47a0e59520683b964fa9c5813cc0f37353a00996d62c47392b
SHA512

003a64c448664a9dc822505f6a5a28b37645666f894a6d6c3b8fd1c14ca0d45451d8d29b19289f6aaf1c9d65496d9bfa108fd765599608623824052e5547f222
SSDEEP

96:Z1/CMbMohNqpB6upyKMznZpiAqarswvImI7y1N1r3:7vAohNq/TUjQly/17

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1ae09d083a26f26bc90c1f90dd760ba_JaffaCakes118

Files

a1ae09d083a26f26bc90c1f90dd760ba_JaffaCakes118
.exe windows:1 windows x86 arch:x86

b1037fd5f233bc5127f009441eb2a505

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateMutexA
CreateToolhelp32Snapshot
ExitProcess
GetCurrentProcessId
GetLastError
GetModuleHandleA
GetProcAddress
LoadLibraryA
OpenProcess
Process32First
Process32Next
RtlZeroMemory
Sleep
TerminateThread
VirtualAlloc
WaitForSingleObject
lstrcpyA
lstrlenA

user32

ShowWindow

Sections

.asdasi
Size: 1024B - Virtual size: 596B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c231asc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ