320d7ffb436d02705235a9cde91c5157_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

320d7ffb436d02705235a9cde91c5157_JaffaCakes118
Size

18KB
MD5

320d7ffb436d02705235a9cde91c5157
SHA1

24a886c3e06f54b1185f19d650c951914dae800b
SHA256

e85d5485782e2c40567102a0eb0e45ca087dabb486b3c8ce1dbcf4f7bd79d0da
SHA512

3ae6cace016ba10c6a99466d7d21e9fed09e88208e02e42e0938de6e96e9fbfde05851563fa42e47564b773de75b9f9db5f0a7d804f640d5bfa17df67593978f
SSDEEP

384:JRvRF4IphV15i+RjT+NlCIe1sw9I0/OAkB05Nc:J1JX11p8lfk/Bmec

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
320d7ffb436d02705235a9cde91c5157_JaffaCakes118

Files

320d7ffb436d02705235a9cde91c5157_JaffaCakes118
.exe windows:1 windows x86 arch:x86

76ad44d6d67d3d82e55350e3f753add3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
GetCurrentThread
GetStringTypeA
IsBadCodePtr
CloseHandle
LocalHandle

Sections

.text
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 135B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 301B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE