49c6eabe29f946e63d44032ea20c2102_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49c6eabe29f946e63d44032ea20c2102_JaffaCakes118
Size

13KB
MD5

49c6eabe29f946e63d44032ea20c2102
SHA1

851f3464b12c950162d45d1a70c838cb18a23b68
SHA256

6ed11c66aa5d24918340276fc5d16776f1739303c2aee57807301fc7bb456d8a
SHA512

d0d02143d2db44e8bbf2f64e9ead0e8dcc6f6a39d74af48dac11de7304a3b71abde48a96e39ffab4fcb0a42115d1f89b46f7e07986c8f2998d9e5cca3de648b1
SSDEEP

384:btCFAw1kKXkzQbdDRNKdn0nlOtvBDtQhf:bwffSQMR0lORBxQp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49c6eabe29f946e63d44032ea20c2102_JaffaCakes118

Files

49c6eabe29f946e63d44032ea20c2102_JaffaCakes118
.exe windows:4 windows x86 arch:x86

035b7b8f011491b3ad9a6be112ef0713

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FindResourceA
GetProcAddress
LoadLibraryA
LoadResource
SetUnhandledExceptionFilter
Sleep

user32

DispatchMessageA
GetMessageA
KillTimer
SetTimer
TranslateMessage

Sections

.text
Size: 768B - Virtual size: 750B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 394B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE