addc358cc42bab8126bd9ed43f12b52e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

addc358cc42bab8126bd9ed43f12b52e_JaffaCakes118
Size

20KB
MD5

addc358cc42bab8126bd9ed43f12b52e
SHA1

8bc8e6b8fa789e4397f1dcceddebc87e88c56e1b
SHA256

029fa5215715599eee48ce530fc6f42f1b1cc7515eebc393a5583d4343974480
SHA512

03d28ec9314a4c2028b98a2999e5cf89d95542271f2389fe1071880f498443b8779e951ac3142c7e0ce1ff019929279206a8fc373844a64b86e786e8a54dd34f
SSDEEP

384:x4EdYG5D8EV5q2pa7BQCCOI/bJ33vgI0Q8jysDH5P/A+QdC7p:EqRVrsBBLIz4QYDZPIBC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
addc358cc42bab8126bd9ed43f12b52e_JaffaCakes118

Files

addc358cc42bab8126bd9ed43f12b52e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

faec4c76183c2e1865101266abe00aa4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
GetCurrentThread
GetThreadContext
HeapCreate
HeapDestroy
ResumeThread
SuspendThread
VirtualAlloc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ