21af1fcb56f041f5b2409c0c9a96c0bf_JaffaCakes118 | Triage

Sharing

General

Target

21af1fcb56f041f5b2409c0c9a96c0bf_JaffaCakes118
Size

16KB
MD5

21af1fcb56f041f5b2409c0c9a96c0bf
SHA1

aa09dedf719f2ccae1cdd5c818126a33b2daa1fb
SHA256

fbe83bfa4b50b6f38d392c12490db105ef45dbfb66e7e9ca13ec8b2d6fffda41
SHA512

4c8e9acc80f71e435d5637b47b6152fddff36b6ebe876a51de4588b3c4f2de71297a26a4588d4d444510ecb3faf4377c3a1075f7357a08a0d2febc350b270e58
SSDEEP

384:3ta9L4Rb4abP1Ap/RF0cHyZgCE3jRhsObZmcjeHVX3bF:3ta9L4hNP1ApxExE3jRhsM5wRx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21af1fcb56f041f5b2409c0c9a96c0bf_JaffaCakes118

Files

21af1fcb56f041f5b2409c0c9a96c0bf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6d84fd323d920e436381375d445bbeda

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
GetCurrentProcess
GetLastError
GetProcAddress
GetVersion
LoadLibraryA
LoadResource
Sleep
VirtualAlloc
VirtualFree

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ