6302198afa4ada6481a240f9ca122640_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6302198afa4ada6481a240f9ca122640_JaffaCakes118
Size

15KB
MD5

6302198afa4ada6481a240f9ca122640
SHA1

9a13d8009086b401f819f2722847f9e2a7d7647c
SHA256

7162741f5fd6e3affb2097cb3022d95d3b382beead3f6828902565642d9c2bda
SHA512

3ff35f520de03a591e73ace7758f52f0bf9f863ae0cf2dd9ccd98b5d5c09e982522980ca7091581ecf79ecb3b5b96e3a0432bb7794e774726a8ec6697f11a511
SSDEEP

192:5iIRCYrW8a8yO354Ermmh9ar7xQc3NfP/VCZLLzTaLGEE6LmR2Yp8N8:5ihYrW8a8Bd6uApP/VCoGEnL3M8N8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6302198afa4ada6481a240f9ca122640_JaffaCakes118

Files

6302198afa4ada6481a240f9ca122640_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7e8dc72aab31e1d83b7572af06bf8bb6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
GetProcAddress
GetVersion
LoadLibraryA
LoadResource
Sleep
VirtualAlloc
VirtualFree

Sections

.text
Size: 1024B - Virtual size: 1018B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 94B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ