b922138579563c8529e72493011dc6ff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b922138579563c8529e72493011dc6ff_JaffaCakes118
Size

426KB
MD5

b922138579563c8529e72493011dc6ff
SHA1

21948eeeb322e722ee2d1b04958de59918283ab2
SHA256

7dbef3b4a90b3f7c8243490a15216dda77f96fe6d31d5df8e41538413375dd51
SHA512

70fab68c25f07b68e1356b96046fb5408d7bc8fc7847258e6f56ffed8e73da5c77525e7fc6580033ceea16c95e7404fdc5d34a79e1fe0846d7ae44a21728eaa8
SSDEEP

12288:HiZ2qtM5vO2TQZ9GlmWnth6ilYFvQugWx:Hi4Uf9gx2eYuax

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b922138579563c8529e72493011dc6ff_JaffaCakes118

Files

b922138579563c8529e72493011dc6ff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

560f66eeb453048abf6a7166b008c84e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SwitchToFiber
GetProcAddress
ExitProcess
TerminateProcess
GetModuleHandleW

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 415KB - Virtual size: 415KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ