c8e7bef3622da7d6bd15c68e5da71fb4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8e7bef3622da7d6bd15c68e5da71fb4_JaffaCakes118
Size

34KB
MD5

c8e7bef3622da7d6bd15c68e5da71fb4
SHA1

945691797364431f7002efe5808a43f61a737301
SHA256

8b8a8613f39391c52877f613be4d0f11bd01201f06e84062a0e28a7f9be96c7f
SHA512

3636a05aef77c7c4d568f4f02029473d36c133c2ad66e5967d04bd5173c5acb6b00d11ccfd2aa58579b264779b71bbac82434b036f99a03d0049962e41b11cd0
SSDEEP

768:s0Kl4tATPcIRSLeDmwFjopz9e0UQwQc7BHgxgrF:s0KyATPJRSqDmwqpz9s5RF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8e7bef3622da7d6bd15c68e5da71fb4_JaffaCakes118

Files

c8e7bef3622da7d6bd15c68e5da71fb4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

76b6e0e9b3cb6de9362c3a44e352d5b3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateWaitableTimerA
ExitProcess
FindResourceA
GetLastError
GetProcAddress
LoadLibraryA
LoadResource
SetWaitableTimer
Sleep
SleepEx
VirtualAlloc
VirtualFree

Sections

.text
Size: 1024B - Virtual size: 854B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 346B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ