d3f183f05b4b1b1efb8e06e03d5941a7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3f183f05b4b1b1efb8e06e03d5941a7_JaffaCakes118
Size

15KB
MD5

d3f183f05b4b1b1efb8e06e03d5941a7
SHA1

613471da0df86370996a6c849c8ca4d924b457f4
SHA256

e62419bb27de9e2a54b715ba1f99d564b3712cf1d7ba3ba1b402bb84e40ee162
SHA512

13dc08522ca5708ced689499a703d14fae0a3ab7d5ec2afe911cf37b8f8bca549db57358a5c2fdf45bdaa65f6c4a0460efec3ea282aa477aeb039d04e769964b
SSDEEP

192:SiIRCdrWuDLxJOnAlTmoX+qhwsOPgOt/gaf6Xh9fh/Tj6WFjFLxla1HrWJ:SihdrWuDLjz6YBhwsk/P6vfVTNJyHq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3f183f05b4b1b1efb8e06e03d5941a7_JaffaCakes118

Files

d3f183f05b4b1b1efb8e06e03d5941a7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7e8dc72aab31e1d83b7572af06bf8bb6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
GetProcAddress
GetVersion
LoadLibraryA
LoadResource
Sleep
VirtualAlloc
VirtualFree

Sections

.text
Size: 1024B - Virtual size: 1018B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 94B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ