dad2a9689c3c8ecbdc8e47f50b1c1749_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dad2a9689c3c8ecbdc8e47f50b1c1749_JaffaCakes118
Size

11KB
MD5

dad2a9689c3c8ecbdc8e47f50b1c1749
SHA1

91ebc6f8ea41721f71934159a54fad90a97195e2
SHA256

5448be78afe386ee2803a2d6c56a26b0e7cfc9e08ed06a1673c5f0ae2a8486fb
SHA512

7fead431146fb545bf3c698050d67e37305d89f693b380fe0ca3cd79cde1035c48128f320b1abc1f18a666f0dad585b1d3789a097f8cfcc1568996bc8219b001
SSDEEP

192:FVmJ9xH9KS49w6V+gnM0d3+u1lKNdoV6bTJHjlCnJGQIYA:U9xCnKNdo8jCnZIYA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dad2a9689c3c8ecbdc8e47f50b1c1749_JaffaCakes118

Files

dad2a9689c3c8ecbdc8e47f50b1c1749_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a9d31b14019dfa6a02bf031648897806

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
ExitProcess
FindClose
FindNextFileA
CloseHandle
ReadFile
CreateFileA
FindFirstFileA
GetWindowsDirectoryA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ