d9d0ff0200a52f2af284590092e6cebe_JaffaCakes118 | Triage

Sharing

General

Target

d9d0ff0200a52f2af284590092e6cebe_JaffaCakes118
Size

5KB
MD5

d9d0ff0200a52f2af284590092e6cebe
SHA1

f17576b6ef930de61ef88b31c3186619eaeaa777
SHA256

1a80b04c0adcfe3205bcc3f7b9287e9174a6db047659fc6b8de903bb8b374eb7
SHA512

d7f1ddb22d95c7019e3369ac5fb980a4d2eee3bd5d04349f3142f6a5b046fb39a1dd4115de2274e24209e6a2e25d6dfc32a670872ff9e0e9a3064f53280bc17e
SSDEEP

96:w9SziZhSaAPQzPRFloEPcVMqIwjfdyaFW7:CtbRloEPcPfdg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9d0ff0200a52f2af284590092e6cebe_JaffaCakes118

Files

d9d0ff0200a52f2af284590092e6cebe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0b73cda72d2f5cb6bccc46f6ee7d366f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateWaitableTimerA
ExitProcess
FindResourceA
GetLastError
GetProcAddress
LoadLibraryA
LoadResource
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SleepEx
VirtualAlloc
VirtualFree

Sections

.text
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ