358523c0b02a291f33dde132cf8259ef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

358523c0b02a291f33dde132cf8259ef_JaffaCakes118
Size

37KB
MD5

358523c0b02a291f33dde132cf8259ef
SHA1

688a8315f5632bd7c68eecab929c8497a3415855
SHA256

d0577e485e77a6c45ed2c5ef5c0edb6f2c1c4e302a7a011f1d912cabae200094
SHA512

8b252d7864229e55ab195c4247c8135895dd3cdc86948dc0d19d5fbabd4442070ab8d374f877e87b0d46e9f3ce66e98f88170850a3f0838454ae463076e6c207
SSDEEP

96:ghpwZMjs3ifNQc+XyXCReE3Z2iNc16o3LJcAcYq1iWV7ADfVI:CBOifNQans+sy9i1id9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
358523c0b02a291f33dde132cf8259ef_JaffaCakes118

Files

358523c0b02a291f33dde132cf8259ef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

72ecc8e6dd76de71941dde22e6d136f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ExitProcess
GetLastError
GetModuleHandleA
GlobalFree
ResetEvent
SetEvent
Sleep
WaitForSingleObject

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ