620f9000a130407cd16a3a9722e6fa68_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

620f9000a130407cd16a3a9722e6fa68_JaffaCakes118
Size

12KB
MD5

620f9000a130407cd16a3a9722e6fa68
SHA1

e3704aa3ed54ff1d8907cfff0ebc5acb73497212
SHA256

81368135a433ecc49cfde2cb339774b352bf65b76affaf004d3ee0a4a80be5ed
SHA512

3a4e1ceda6407083de8108e2c8ab5788a92f02bbca0247991fbf04334010d2c191455a342fdb9f5bec8ee33acb62ad66c9826fa821d45b7f09441049bbd825e3
SSDEEP

192:ZncrfCYVfofbRS3a+E7RHc6HU9MSLJtfz4CNUxPgw7GzS80iOmSnNV:ZnzWfofbRdlHDM7f1UWUGzS/5DnNV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
620f9000a130407cd16a3a9722e6fa68_JaffaCakes118

Files

620f9000a130407cd16a3a9722e6fa68_JaffaCakes118
.exe windows:1 windows x86 arch:x86

52e7140f06d4b0e9780377fa1a230b70

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
IsBadCodePtr
GetCurrentThread
CloseHandle

Sections

.text
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 583B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE