a1f999f0f5ad0bed8079a67fdd4958ad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1f999f0f5ad0bed8079a67fdd4958ad_JaffaCakes118
Size

18KB
MD5

a1f999f0f5ad0bed8079a67fdd4958ad
SHA1

a98a51cb5f508741490dd5c920a4fb04375fc390
SHA256

2acdf2e23f4ed4c2eb2c63d881f678563c88eca17de004f93a05768c65d1770d
SHA512

3d030696e20e30f5a300cb327af63a45df0116e86c5fb4a99292b1b7881c5f57f85c4ba98f194a2c23006218b914595b2cf4f2aac423a268117f894c49afb5ce
SSDEEP

384:AO7tndv+9R5N7zto2BRXl0qa/65MGAKJedQ7sbGbb3wc:vxdvi5N3qSmqa/6dtJeKsbGvAc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1f999f0f5ad0bed8079a67fdd4958ad_JaffaCakes118

Files

a1f999f0f5ad0bed8079a67fdd4958ad_JaffaCakes118
.exe windows:1 windows x86 arch:x86

76ad44d6d67d3d82e55350e3f753add3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
GetCurrentThread
GetStringTypeA
IsBadCodePtr
CloseHandle
LocalHandle

Sections

.text
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE