104390fb9ed2ad6fdb1548bf41c6362b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

104390fb9ed2ad6fdb1548bf41c6362b_JaffaCakes118
Size

16KB
MD5

104390fb9ed2ad6fdb1548bf41c6362b
SHA1

6c5c1c6562a8d2478264828cdaf7cdcf8416981a
SHA256

1c666d80b5ee0b7cac49d0d286d4b7b19479acb14b0ced36f5df983c83823b1a
SHA512

1a4023e243cad9ed3fd0341f4fc9c6a6fa246bf99cc79acf49072dd58c9bade86a28b4f72cac879d8698fce57694821c965119b811840a650be26efa8496bdd3
SSDEEP

192:IJb2QloEPcjPv72MroCJj2F2FZkPD5aOuK+k/eb/SkHkur8dojJv0Jj0x:0rloE0/VrTJjhLkPIOx/ejSO/8olMax

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
104390fb9ed2ad6fdb1548bf41c6362b_JaffaCakes118

Files

104390fb9ed2ad6fdb1548bf41c6362b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0b73cda72d2f5cb6bccc46f6ee7d366f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateWaitableTimerA
ExitProcess
FindResourceA
GetLastError
GetProcAddress
LoadLibraryA
LoadResource
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SleepEx
VirtualAlloc
VirtualFree

Sections

.text
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE