72ec65ce84d740420b29249eb08e9cc7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72ec65ce84d740420b29249eb08e9cc7_JaffaCakes118
Size

13KB
MD5

72ec65ce84d740420b29249eb08e9cc7
SHA1

e50df5d14d6444637a690df0de5734edab715c69
SHA256

969d03b316e8b93a04c90309b21ba03ea068643a3d1f34719b42141b8280d231
SHA512

fbb303cd166d3d6f895924fb98495e97af839c1baa092929a07040b6aa9ea2de067dbe8a3e8c3a90a5ede049fd0b36761fc70a1e7cb59926158b6c8bba626115
SSDEEP

384:wtCFAw1kKXkzQbdDRNKdn0nlOtvBDtQhfg:wwffSQMR0lORBxQpg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72ec65ce84d740420b29249eb08e9cc7_JaffaCakes118

Files

72ec65ce84d740420b29249eb08e9cc7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

035b7b8f011491b3ad9a6be112ef0713

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FindResourceA
GetProcAddress
LoadLibraryA
LoadResource
SetUnhandledExceptionFilter
Sleep

user32

DispatchMessageA
GetMessageA
KillTimer
SetTimer
TranslateMessage

Sections

.text
Size: 768B - Virtual size: 750B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 394B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE