dc97e86be573abd106eb024a3bced777_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc97e86be573abd106eb024a3bced777_JaffaCakes118
Size

7KB
MD5

dc97e86be573abd106eb024a3bced777
SHA1

8b2b5758de4ac429cf9a675ab84668597bd80a31
SHA256

f13fdac7c46a7cb59cf825e2a6437749f27304f210b7adc1200798e454b911ed
SHA512

f0aa8952a9a388fd1b282fe8ffafe330bfe51f90e979bb91a46525d06524a682e2b619f8b31355dd1678cb556ad22e6e317b01d10f4e35ec18bb680481289cef
SSDEEP

192:pRGrI7Q/rCdvuit1uUhCmNQTdJP6QXM+r:zGrb/rCMKDhCmkJPhTr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc97e86be573abd106eb024a3bced777_JaffaCakes118

Files

dc97e86be573abd106eb024a3bced777_JaffaCakes118
.exe windows:1 windows x86 arch:x86

7d2bc5af8eb2cea4de7700c078264f9c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GlobalAlloc
GlobalLock
RtlMoveMemory
GetModuleHandleA

ntdll

RtlDecompressBuffer

Sections

.text
Size: 512B - Virtual size: 194B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 248B

IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ