1c0983d9620f578c32b0542e4b67dfbd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c0983d9620f578c32b0542e4b67dfbd_JaffaCakes118
Size

423KB
MD5

1c0983d9620f578c32b0542e4b67dfbd
SHA1

e55329827c7d43e864063ad67d8dde45dff19a47
SHA256

507e9cf89a6b994ad971119ad2b4d2ed82a9a801713bab8658463ca5eaeb29b1
SHA512

21cb2a9b98b414e46890602bc087ba9fa7e7e828d562fa9cc151db697196debc554d6ced37b2280f2bd8f62d0544587e1a84e523d35970c13d0ba0bd62b69935
SSDEEP

6144:iLdHJHfi+MhVbmr7b0WxywL0C0kuJgQ1jYixkizVHZbrFCEjEo4UHENtL:iZHBfiYrPTXlKCGlZBHpFCEh42atL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c0983d9620f578c32b0542e4b67dfbd_JaffaCakes118

Files

1c0983d9620f578c32b0542e4b67dfbd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5265396cce55c7fc139786d860943929

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SwitchToThread
GetProcAddress
ExitProcess
TerminateProcess
GetModuleHandleW

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ