236706e8154d527fa148fb8930936505_JaffaCakes118 | Triage

Sharing

General

Target

236706e8154d527fa148fb8930936505_JaffaCakes118
Size

16KB
MD5

236706e8154d527fa148fb8930936505
SHA1

addacba39cda8a13583046ff2cc7bada69f37abb
SHA256

3327ff6180d1d2b3bb66c66fc0d6185247539fbd8227886c2ee6e86d36ac11ad
SHA512

b98a12b3da89463700039096b038e8ef72fc4120fe84facb98021ecf7c172795fb9e89ae74db31880f6cb5371cd5ebfcbeb10f804ecc2d286d025fc6463956f3
SSDEEP

192:yDoRrHAlo1XYvNqAHn2NjYTLQol/wKWK5nxfvtwWX3cf80GOKopOhh:tRTAlo1AOWHVl/vWexfLHcf8ZOK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
236706e8154d527fa148fb8930936505_JaffaCakes118

Files

236706e8154d527fa148fb8930936505_JaffaCakes118
.exe windows:4 windows x86 arch:x86

76b6e0e9b3cb6de9362c3a44e352d5b3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateWaitableTimerA
ExitProcess
FindResourceA
GetLastError
GetProcAddress
LoadLibraryA
LoadResource
SetWaitableTimer
Sleep
SleepEx
VirtualAlloc
VirtualFree

Sections

.text
Size: 1024B - Virtual size: 854B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 346B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ