879a904f967c0f65be08811e5556cee9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

879a904f967c0f65be08811e5556cee9_JaffaCakes118
Size

16KB
MD5

879a904f967c0f65be08811e5556cee9
SHA1

4b50ab82eb1987e864ed4ba43955b45b71a3d490
SHA256

6dec5eabe69aa60595447d1551bc067c7d9fd5054707beca348a0a631c712e88
SHA512

9a9b53a79a790da1a324e3f58561b2b8baadac2900aa1df92c3cda1e87eccb3b025bf492e640a6ccbc627158bac17e42bffe70fc22fd012e4fd106b5226b3f62
SSDEEP

384:CAm4onZHM/ymGAXnS0e6PpzJliezzcyfv9URvFuD:CA3op9QXnxPpzJjzpf2hk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
879a904f967c0f65be08811e5556cee9_JaffaCakes118

Files

879a904f967c0f65be08811e5556cee9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5bc46e5803a7048db7ee02260df87515

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
FindFirstFileA
FindNextFileA
FindResourceA
GetCurrentProcess
GetLastError
GetProcAddress
GetTickCount
GetVersion
LoadLibraryA
LoadResource
Sleep
VirtualAlloc
VirtualFree

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 390B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 122B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ