897a0bf9fb02921c67cc1498526533a5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

897a0bf9fb02921c67cc1498526533a5_JaffaCakes118
Size

20KB
MD5

897a0bf9fb02921c67cc1498526533a5
SHA1

1216be5ed685800eaa5ba06155c1d29906da6f13
SHA256

6973a47c916a1e4b33e57de3c08ec287d8d9d5b2222ca499f33f164709a4170a
SHA512

72f40965f2325b7907210d1261818971bd24b21ee17bca67d4790859a40596036b65a185fbef13434d2b451abd0488e85b108d4de6b757b2a654962d83706d40
SSDEEP

384:kNJYjgASFRb8BPgMJas4y0lD3FwdJmgdYwB20y8RLH2BfzRVxg6EtY:kEj838BPtos4yA3FwPmgGwBTzOzRVu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
897a0bf9fb02921c67cc1498526533a5_JaffaCakes118

Files

897a0bf9fb02921c67cc1498526533a5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fc993ffd293ef852653192d5224318a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
ExitProcess
GetProcAddress
GetThreadContext
HeapAlloc
HeapCreate
HeapDestroy
ResumeThread
SetThreadContext
SuspendThread
VirtualAlloc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ