14a956d180e86f4021e3f0207e6917ec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14a956d180e86f4021e3f0207e6917ec_JaffaCakes118
Size

20KB
MD5

14a956d180e86f4021e3f0207e6917ec
SHA1

5b016bb305281c85b9fa62b8aee49ef805ec28a0
SHA256

4469e4a892094a4963449f80632050aaa14204bdb62900f8291821dcfd7a92a0
SHA512

3f82ae9857203b460572e76ecc942853be238b8c3c10212753034076b4be64d90c846f1809c9f1c8b887a43fa7afb841beb919d0e42cd829c1e214944bd1a45e
SSDEEP

384:GFlBurGBzHEf5mNHsdjnOWZoazb6hZRQseYBGmCidrlIri7Kq:Od6fEZsdj7ZoaYvBlX2q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14a956d180e86f4021e3f0207e6917ec_JaffaCakes118

Files

14a956d180e86f4021e3f0207e6917ec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ab6213ea4d11f25c6693a83f111335a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BuildCommDCBAndTimeoutsA
EndUpdateResourceA
ExitProcess
GetProcAddress
GetTickCount
LoadLibraryA
BackupRead

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ