a96a77e8262a85c53ae07983c21e4a80_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a96a77e8262a85c53ae07983c21e4a80_JaffaCakes118
Size

26KB
MD5

a96a77e8262a85c53ae07983c21e4a80
SHA1

1827d0098e9476908e38963a795146261048ca51
SHA256

3d9c7112d172553d0e57520d3074544b78c075429001fd23ba35cdedfc496f5d
SHA512

8676c7966f77df220114c3df752d1507f4d8316cb8a872bd01227c76729c8632448175a735f9269581ba57ea156dacd5562283f7ba6af2c4d822347a9e8a3454
SSDEEP

768:i3HgTcwwvlo5VmhCGnQsK5LbxCU0f1drszt+XnqY:i3AIwAlUVmhCX/xCd3sMt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a96a77e8262a85c53ae07983c21e4a80_JaffaCakes118

Files

a96a77e8262a85c53ae07983c21e4a80_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0e90f156ccf31ae36139633e902fad86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
SetFilePointer
lstrcatA
IsBadReadPtr
lstrlenA
GetProcAddress
GetModuleHandleA

msvcrt

memset

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 306B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ