c1df6872fdfebf40b90808bf0bbbaa7e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1df6872fdfebf40b90808bf0bbbaa7e_JaffaCakes118
Size

13KB
MD5

c1df6872fdfebf40b90808bf0bbbaa7e
SHA1

d09b4492a8e2b281a4593513108d8ea713b3bea1
SHA256

7bcd54665134088c02cfb3654a916dcd43c8222ab0d962f892cbc8204ed91a7f
SHA512

4a2d201a3663729e11a3e828e06fbc5a99f45422ba22af01bb707d6ab552c3aaf108c7a3b319795ca0cd84ae340a53912fb2e5d96ea97020a74c9f746f19fa15
SSDEEP

384:2tCFAw1kKXkzQbdDRNKdn0nlOtvBDtQhf:2wffSQMR0lORBxQp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1df6872fdfebf40b90808bf0bbbaa7e_JaffaCakes118

Files

c1df6872fdfebf40b90808bf0bbbaa7e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

035b7b8f011491b3ad9a6be112ef0713

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FindResourceA
GetProcAddress
LoadLibraryA
LoadResource
SetUnhandledExceptionFilter
Sleep

user32

DispatchMessageA
GetMessageA
KillTimer
SetTimer
TranslateMessage

Sections

.text
Size: 768B - Virtual size: 750B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 394B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE