19dad5a58cc6c756d01b79c6ae6f194f_JaffaCakes118 | Triage

Sharing

General

Target

19dad5a58cc6c756d01b79c6ae6f194f_JaffaCakes118
Size

299KB
MD5

19dad5a58cc6c756d01b79c6ae6f194f
SHA1

ee8a4f39d2da50d465031d8afa2d8e1ccd788a97
SHA256

d6083ce17f709108ff00baef25c8fc719e853e58cf1ab89c123342b7c67d53d6
SHA512

15e4623b218b42359bdbe11fb99dd222b51ad7fc4e6373f9eb53e9f8c1d8e6ff4df8ba136ebd29a5dacd13e76be59f3a502a7b6d92c8fe012f0970608e869471
SSDEEP

6144:DOvq6K5i9BvMTIgf/CS+h4mUaqrfWiGDQ7513KyNjXy4g3:Dyv9wCH4mlqreU75ZKyBA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19dad5a58cc6c756d01b79c6ae6f194f_JaffaCakes118

Files

19dad5a58cc6c756d01b79c6ae6f194f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

acb387b3aee05e4a50ae55599974df99

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualUnlock
TerminateProcess
ExitThread
GlobalDeleteAtom
CreateProcessW
EnumSystemLocalesW
GlobalFindAtomW
DeleteFileW
GetProcAddress
EndUpdateResourceW
GetModuleHandleW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 271KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ