7070c1824e8870a9a0c8ceb51275503e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7070c1824e8870a9a0c8ceb51275503e_JaffaCakes118
Size

13KB
MD5

7070c1824e8870a9a0c8ceb51275503e
SHA1

bc7dc70286e5597522582173a3b15e03121628e0
SHA256

fbe2786df05296d8a94fe08f79959d7d1c01d618eb97d772993f90f871f5e895
SHA512

c78e61c79f00010861d519688e46a4e728ab9b2a972b148ca26a15f44fe6c9a4f871c9c55a8892da4d8424b2486e5fee7070cc251236be3193638169d4c08535
SSDEEP

384:Y1xYr8kAlXA5gj8pchcOt3gMZAicIu/QNzND:Y1mqXo4bhcOt3gM+CRND

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7070c1824e8870a9a0c8ceb51275503e_JaffaCakes118

Files

7070c1824e8870a9a0c8ceb51275503e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3daa69c2a676ed1deca98497fbe4f644

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
LoadLibraryA
SetUnhandledExceptionFilter
Sleep

user32

KillTimer
SetTimer
TranslateMessage
GetMessageA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 320B - Virtual size: 318B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64B - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 320B - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE