dc9f67ae1d175386625c97fcf22c77ab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc9f67ae1d175386625c97fcf22c77ab_JaffaCakes118
Size

11KB
MD5

dc9f67ae1d175386625c97fcf22c77ab
SHA1

15bbbf031699fa112cf41fd7e31560a3ed4263af
SHA256

7aeb96ab94b04bde50b338ff8cf20bb430eedb7bc63257e091dc990ca654f792
SHA512

845211e8a4276a31f0a958ef89800db9a56852547fdfbdde4311a8467fc677c9fed778752d4f3e4daf881b39398f3ab229ec6ca1d90c3a350e4713ca64cd0e6b
SSDEEP

192:Dxp5j3VtWK/UdEUn2Fl90MgZpN5R2IYGMJmZusB0UjK:Dxz3VUEUn2FH2pNIGMsPB0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc9f67ae1d175386625c97fcf22c77ab_JaffaCakes118

Files

dc9f67ae1d175386625c97fcf22c77ab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aec79bb77b57d3578656a247785556f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
LoadLibraryA
Sleep
lstrcatA

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ