b8e0c2a2a843675b2e5e7178f5f5ab4b_JaffaCakes118 | Triage

Sharing

General

Target

b8e0c2a2a843675b2e5e7178f5f5ab4b_JaffaCakes118
Size

16KB
MD5

b8e0c2a2a843675b2e5e7178f5f5ab4b
SHA1

a9089982bcd0d2725b58399ebcbc3c6d7870a13a
SHA256

808783353ef247db76e370a2856f632919e544901a883539e9a02f1726111ce8
SHA512

d93c5d4755bfe4e0ee3191bf8e45d995533421e731e409834a34132412d492477c7d58a4e895fab66d83504eed15aeec21e65f3d8db438fc287a8cf823abdc1f
SSDEEP

384:zXFloE0Pf/SkChw60EV0KUm/pnLpmYOSB2:TF4PqaMUu1mr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8e0c2a2a843675b2e5e7178f5f5ab4b_JaffaCakes118

Files

b8e0c2a2a843675b2e5e7178f5f5ab4b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0b73cda72d2f5cb6bccc46f6ee7d366f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateWaitableTimerA
ExitProcess
FindResourceA
GetLastError
GetProcAddress
LoadLibraryA
LoadResource
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SleepEx
VirtualAlloc
VirtualFree

Sections

.text
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE