1c5a39ceb74df88292a9d1a641811fab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c5a39ceb74df88292a9d1a641811fab_JaffaCakes118
Size

13KB
MD5

1c5a39ceb74df88292a9d1a641811fab
SHA1

2e7d0ddc96af91cf75f561d9cea48756c452d2a9
SHA256

3cc50c99960817a0cebc7bf66cbf653c74d25c3ee89b87ee2c51edadb7e4d0bb
SHA512

9657ffa93c09561fdb3c8c080fc0f8a634dbeb99d73a21c2090075e969a96d911802b8687820fa8af9e769ba3af3a5ac2edc2d1dbf1ce4bd5d961e1557de1ad2
SSDEEP

192:UUbN5j0d5v+IDetEBwb9o4XuL+vsdtyApETBgdMI1qeAvcJRZXI0UwUSRlXwryM:U+N5jUmCab9orLExPgeIcan9blXwf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c5a39ceb74df88292a9d1a641811fab_JaffaCakes118

Files

1c5a39ceb74df88292a9d1a641811fab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

982e0d71dd2802d14b00b800de53cbf5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
LoadLibraryA
SetUnhandledExceptionFilter
Sleep

user32

DispatchMessageA
GetMessageA
KillTimer
SetTimer
TranslateMessage

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 346B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE