3cc15908dbfa311ddc1e8764c9a4bebe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cc15908dbfa311ddc1e8764c9a4bebe_JaffaCakes118
Size

21KB
MD5

3cc15908dbfa311ddc1e8764c9a4bebe
SHA1

9e27e7f1560fe7a14553dc03e9f3cea228807eaf
SHA256

8fef19e0323800b2b4d85b1e8baad9a6eb639a0b1afddc4d2dbbd60e3271155e
SHA512

70a3398f292173014fff3af3070ed4914dc794f05c2802c2b5c743e9f723e7448516661e38f52903779565902f85f8bfe46e4effd096a3afead2b3e41a822ffb
SSDEEP

384:E7jisJ4O8rfydrH0q6YOQMVmYi2MHajwEy1WtQzqN1Ivg15bBBM9y:Kz4Or5jUZmYEHZxzqU/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cc15908dbfa311ddc1e8764c9a4bebe_JaffaCakes118

Files

3cc15908dbfa311ddc1e8764c9a4bebe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

03487461671c1168f5fce7406fba5f2a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AllocConsole
BackupRead
CreateWaitableTimerA
EndUpdateResourceA
ExitProcess
GetProcAddress
LoadLibraryA
WaitForSingleObject

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ