a4c360eb792cc3f1cc4ad9909a4fb940_JaffaCakes118 | Triage

Sharing

General

Target

a4c360eb792cc3f1cc4ad9909a4fb940_JaffaCakes118
Size

45KB
MD5

a4c360eb792cc3f1cc4ad9909a4fb940
SHA1

597b4a3dd3ee6fad90fc2faedba8086a33ceb762
SHA256

1d6b517fe7469d2b5d6a0b96cb8626424185c5711c059b9f7d9151168a1df3c8
SHA512

5eaeee62f999387847dc303937a4487b55bdfd51c1ed4fcf5c205f956685f33c2a75f01569419817311775bf4c443a43c598626a4109c36a39a77d6bb676949d
SSDEEP

768:nCJsklPP8xCJ77MddfDhC5KazDXlHj0d0uB/Na5QXcad2FXSdWKTE:CeqPZX2fM7HjQc5QVFWd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4c360eb792cc3f1cc4ad9909a4fb940_JaffaCakes118

Files

a4c360eb792cc3f1cc4ad9909a4fb940_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b9f2cc673e99f556444ad901886c064a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
LoadLibraryA
Sleep

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 126B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ