a0bf9485286a463cb7f4ba331b4b103a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0bf9485286a463cb7f4ba331b4b103a_JaffaCakes118
Size

11KB
MD5

a0bf9485286a463cb7f4ba331b4b103a
SHA1

de3627c203707fa93fc7bcc92e83a464c6457ad9
SHA256

962486d853525f9072b0b6b2ce1b45198066ca1f46f30c73a2b5e2d12a79fe7e
SHA512

22ea7e863f3b34c81da96c0bf93b38304cf94f6f5b00fb14d05dc39031f04b0a8590ded2c5a2444f2cf9b50fca7b5dd413b8b15cc991a807bb26df10fc7d6ce4
SSDEEP

192:9c1Wr8SJp1ciumb/5e+6ajt/KmZmqn7MWz:wWrPbzz5e+6v7W7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0bf9485286a463cb7f4ba331b4b103a_JaffaCakes118

Files

a0bf9485286a463cb7f4ba331b4b103a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

220e6760520382381a276cbdd01fe5f9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
ExitProcess
FindResourceA
FreeResource
GetCommandLineA
GetFileAttributesA
LoadResource
LockResource
SizeofResource
Sleep
VirtualAlloc

shlwapi

StrStrA

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 382B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ