01388b783fb860c37388c355d9eb9cae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01388b783fb860c37388c355d9eb9cae_JaffaCakes118
Size

94KB
MD5

01388b783fb860c37388c355d9eb9cae
SHA1

e6696b1a26fa4dc7c8ff5fab7c25383cea2d7cf9
SHA256

36440575606de5af7e61c2e6a89523264672e1982bd8fdd9e616bdc2f3a5e54c
SHA512

bd9aa716f82e1df2562a99ec695c7b5475885cc91627a65e8aafdb7544123e9515e67123522fbbb946eb63b63d094ac380b62854b3a7c3ceaced462d8a632227
SSDEEP

1536:OK/D0s6hG6zAgrE5b2l6eRK8r/6GIfIuHSDdmvXoDfL9UZR0v3uoj8fMf45:OK/D07hG6M+lZ3iGIgA/XAfmZ+v5j8fv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01388b783fb860c37388c355d9eb9cae_JaffaCakes118

Files

01388b783fb860c37388c355d9eb9cae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b14365893e45c4a0e08cd3c1765a9f98

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

icmp

IcmpCloseHandle
IcmpSendEcho
do_echo_req
IcmpCreateFile

urlmon

CoInstall
ZonesReInit
RegisterMediaTypes
RegisterMediaTypeClass

kernel32

CloseHandle
ExitProcess

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 89KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE