39b442b7dd9f40df1328524ee9c0e131_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39b442b7dd9f40df1328524ee9c0e131_JaffaCakes118
Size

15KB
MD5

39b442b7dd9f40df1328524ee9c0e131
SHA1

ae303569983e3bd4bb3668f02e85b966d1d317a1
SHA256

c567a888d7a2228de5aadf48e0472f104febe34cb43b52d212621246c53ee7db
SHA512

220caf7f19bfc4d57b016911e9c556e8c551b3fdc8ba523b46ccc4a3a7129cc2b98b4188e4e9d1b23f911eca3de952db0b053cddbd1f8f677a45a4bb2c61b984
SSDEEP

192:uqDzrHDDqoYbE3tMhXBicOoYJCc9VeIKJMtLHHvuESfiYxVGa0Ft:uQTDDqoYb73i4c9FKetLHPfYxYa0F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39b442b7dd9f40df1328524ee9c0e131_JaffaCakes118

Files

39b442b7dd9f40df1328524ee9c0e131_JaffaCakes118
.exe windows:4 windows x86 arch:x86

76b6e0e9b3cb6de9362c3a44e352d5b3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateWaitableTimerA
ExitProcess
FindResourceA
GetLastError
GetProcAddress
LoadLibraryA
LoadResource
SetWaitableTimer
Sleep
SleepEx
VirtualAlloc
VirtualFree

Sections

.text
Size: 1024B - Virtual size: 854B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 346B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 98B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ