840a814d6772f11012f825d09334f7ee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

840a814d6772f11012f825d09334f7ee_JaffaCakes118
Size

15KB
MD5

840a814d6772f11012f825d09334f7ee
SHA1

0514f79a49b9d6563bc72ea1b79a1f8cf7b23691
SHA256

2f0b95942e4a0464aa29e1c2158a5ab241ac15f7dbe75c5d98a7cf0837fc041c
SHA512

2226953dbd0e997cdb0f51ab6845a6d5b1829822f867ffc18c28c726eda8796409bd55dc380ab007677cddd6d1a9d43759e79f249b6792f3164de0d4fe0f4d77
SSDEEP

192:Ub2loEPcRKckFWBcEFJYsEmyzZhsIzDtk0HjQvWDWHofKizJcKaRzA:U6loE0cckFWBjFWsbUhvbHbaeKK2R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
840a814d6772f11012f825d09334f7ee_JaffaCakes118

Files

840a814d6772f11012f825d09334f7ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0b73cda72d2f5cb6bccc46f6ee7d366f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateWaitableTimerA
ExitProcess
FindResourceA
GetLastError
GetProcAddress
LoadLibraryA
LoadResource
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SleepEx
VirtualAlloc
VirtualFree

Sections

.text
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rynpkze
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE