d34690a9082b9608b03521e338b1e196_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d34690a9082b9608b03521e338b1e196_JaffaCakes118
Size

40KB
MD5

d34690a9082b9608b03521e338b1e196
SHA1

80ef4f960b174adb89e9f25eecd81aed2556b068
SHA256

741c30e24f6267cd04e362066bdaf604752da8c191245d22a77a0364155dc032
SHA512

04849b04fb105dfd629d2c9c1fefdbcc9e396bdd568edb50110fe934c4d8df0683ed930cbb39bb9d7d41870592331670ddbe29ccd2c1ba3961b5273aba7dadd4
SSDEEP

768:UK3njMb9qExPgvH9pg2dV4HlV7F+GI8x/oOEBeYOJZeSr67UF:5njW976H962dVibxVxolOJnII

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d34690a9082b9608b03521e338b1e196_JaffaCakes118

Files

d34690a9082b9608b03521e338b1e196_JaffaCakes118
.exe windows:4 windows x86 arch:x86

982e0d71dd2802d14b00b800de53cbf5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
LoadLibraryA
SetUnhandledExceptionFilter
Sleep

user32

DispatchMessageA
GetMessageA
KillTimer
SetTimer
TranslateMessage

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 346B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE