6820273c718c5955ebbe18786410fde7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6820273c718c5955ebbe18786410fde7_JaffaCakes118
Size

12KB
MD5

6820273c718c5955ebbe18786410fde7
SHA1

3fc9fb4520210c8082904827cafb5da9f46756b6
SHA256

cc5788729f7d394a1a9ac09ad39ea224dab6b4d159dcf1f3eb5966aa788e5e2c
SHA512

605c11b066ae5f965a9216a11ee49cce0d590cceab7d06dd1a7dfbc68809c248c74f01e954e19306914a1343396e8a816975b8b29c56b68439fe7a7a17f6febf
SSDEEP

192:gxjjag2bV8jnktNc3syrFJTBWNb1ndCTJW2N+6/4:gsueWsymHe84+6/4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6820273c718c5955ebbe18786410fde7_JaffaCakes118

Files

6820273c718c5955ebbe18786410fde7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

301b2e79f53b57c52c215524d130dc97

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
FindResourceA
GetModuleFileNameA
GetModuleHandleA
LoadLibraryA
LoadResource
LockResource
SizeofResource
Sleep
WriteFile
lstrcatA

Sections

.text
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 342B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE