9600c34606ad02c4edc624186e4dad5d_JaffaCakes118 | Triage

Sharing

General

Target

9600c34606ad02c4edc624186e4dad5d_JaffaCakes118
Size

103KB
MD5

9600c34606ad02c4edc624186e4dad5d
SHA1

85194f280956f6943f46f6c7504c7e4d6f4a00a2
SHA256

9f72722bf1ee938fb4c70e0418d7e10ce5900ee3c9c9198a05b86ce14011d053
SHA512

a5e1deb1f692a683e9a1b052693edd522534d47b74b08984d1f75a889e2d1b6105b155f35c2e34d4bf98909e1a260a2f27629f5fb59bb69e47f5c34e0b63f305
SSDEEP

3072:n1BfMiy6J3IDK2yzqxkdhlahQ3pwJ2hLRpP:nffMJ66G2yzqxkEe3p1lRpP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9600c34606ad02c4edc624186e4dad5d_JaffaCakes118

Files

9600c34606ad02c4edc624186e4dad5d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fce7809a30096dee5d325be7178490ba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
ExitProcess
FindResourceA
GetModuleFileNameA
GetThreadContext
GetTickCount
LoadResource
LockResource
ReadProcessMemory
ResumeThread
SetThreadContext
SizeofResource
Sleep
VirtualAlloc
VirtualAllocEx
VirtualFree
WriteProcessMemory

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ