483e4255316c95c1005a2ade1585e601_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

483e4255316c95c1005a2ade1585e601_JaffaCakes118
Size

17KB
MD5

483e4255316c95c1005a2ade1585e601
SHA1

c3c3c186a67d2bc65306eebdd96b32fe416d25a2
SHA256

4b05d70ce4ebb0fedd59793a2a0ff0bf319712114a8beb8b7b44542c797adc9e
SHA512

f737708651248139970c3bdc1dc1c1594ca3c6da10e72ef0f1438e9f3ae1f94cc88512b00cbeea4d74cfc63b5add8b86c8eab2857277bd38caa673afce138f4f
SSDEEP

384:83jIRTX7/QQZONaSdr0qsxBf0Q3V3CMvH:83UL/QkAdMx504V3CMvH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
483e4255316c95c1005a2ade1585e601_JaffaCakes118

Files

483e4255316c95c1005a2ade1585e601_JaffaCakes118
.exe windows:4 windows x86 arch:x86

945e255a084395f9d23c911601a06056

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
LoadLibraryA
SetUnhandledExceptionFilter
Sleep
VirtualFree

user32

GetMessageA
KillTimer
SetTimer
TranslateMessage
DispatchMessageA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE