3da2ff91b2d2d49cc642a8af19d7f493_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3da2ff91b2d2d49cc642a8af19d7f493_JaffaCakes118
Size

7KB
MD5

3da2ff91b2d2d49cc642a8af19d7f493
SHA1

ae2e97a3d86da9bb06d97c5880530924afa439cc
SHA256

e6d1c913d366c644258fe03b9155802c0db2c5fa5766d80ca4ed0957e0664e28
SHA512

5217ec6e4c563cc024aa8d3a784c9fdd41f56be093ecdfcf31a2febca5bd2325525c00b53c381a22469394f1258a9f7827e78be11bfab45f03beabcbd1081e9e
SSDEEP

96:Yk6/mgr0dy5ok2Q9tpW7RXu85sfPk6ODyZNBN8yDToFPiZq7WxEKxLP6Wqtf3:YkrgGwpaecKVOi7N8yDcgAOPLP6Wqt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3da2ff91b2d2d49cc642a8af19d7f493_JaffaCakes118

Files

3da2ff91b2d2d49cc642a8af19d7f493_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b87a8b76fe6cde1c30520bad61aebbae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
RtlZeroMemory
Sleep
CreateFileA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ