8a40b44a521ea02d9110c792133ed6ea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a40b44a521ea02d9110c792133ed6ea_JaffaCakes118
Size

18KB
MD5

8a40b44a521ea02d9110c792133ed6ea
SHA1

e8556d91fcbd0637dd6ee55c67031e12423c1c31
SHA256

70c8c946dea8a3217bc65575dc3287d9fb21629d60d48fe5b9834b85a9f84ee4
SHA512

8bfa81fbfbe4bb9b2e0603b65c284d78a7190e5c9aa3ef3c56fd4a4df3f3cadbc22d068ab93524613d2fa9c32fe1f8cfe39e49471017c4028740757e9d175b0e
SSDEEP

384:viFVYNYMSe+DOONpWJXHR7UYCuY+lK3ntUCR7q:vBuTNpC3q3uY+Y3iCR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a40b44a521ea02d9110c792133ed6ea_JaffaCakes118

Files

8a40b44a521ea02d9110c792133ed6ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aec79bb77b57d3578656a247785556f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
LoadLibraryA
Sleep
lstrcatA

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE