02c97dfa4cba868f03af99d415fc1c42_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02c97dfa4cba868f03af99d415fc1c42_JaffaCakes118
Size

20KB
MD5

02c97dfa4cba868f03af99d415fc1c42
SHA1

013d0cfa56632d64e5d412117b94b2a9d06f12ff
SHA256

ade499f994054571e3c4b86bfd870e1166c59ff7c34dfff480e2a2842e7df20d
SHA512

2ecb90d1158748273befe7bb7ad4fb7a1effb9d764a2d8ca36f76eeaca9be71d3f0835a1ae3814231b0900f44248e9ccbe166610b9294405337fa0f3075375b8
SSDEEP

384:aU+7FjDVWHdZPZw5486mbFKZrIG3IMEjWGSkezZn6k4cOIonjXh:aBZIZ/9XMMpz16yojx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02c97dfa4cba868f03af99d415fc1c42_JaffaCakes118

Files

02c97dfa4cba868f03af99d415fc1c42_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f6f0f34688cb6155016ea84b5383e0f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
GetCurrentThread
GetProcAddress
GetThreadContext
HeapAlloc
HeapCreate
LoadLibraryA
ResumeThread
SetThreadContext
SuspendThread
VirtualAlloc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ