a80d0e9a2ea78a01acec4078ebd3dec0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a80d0e9a2ea78a01acec4078ebd3dec0_JaffaCakes118
Size

26KB
MD5

a80d0e9a2ea78a01acec4078ebd3dec0
SHA1

ff21eef7a34161f8fe36edd19c0f026e0357c7d1
SHA256

52ed3f30098c6ce668f16ca572f8f7c5673b1a6c38bc45771d02baaa2718fbc4
SHA512

7672428f9b85306a687392a254a2b0483af8a96e2d81311920c19ebacb2d317bc71cece7e6216663daeaba52caff41796eb721a85ea47c7cbf89804303af393e
SSDEEP

384:+KQHQoUKi/jIm6G1cQlTPH9daUFGIkGLud0O6o6+KlgMDv:uWdsbGXHvjFGIkD0O6su

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a80d0e9a2ea78a01acec4078ebd3dec0_JaffaCakes118

Files

a80d0e9a2ea78a01acec4078ebd3dec0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

28318193b3a83aca539941e0b5ea951e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetExitCodeProcess
VirtualAlloc
GlobalFlags
DeleteFileW
EndUpdateResourceW
VirtualProtect
ExitProcess
ExitThread
GetAtomNameW
GetDateFormatW
GetModuleHandleW

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ