e1770bdb6827189ac134ce0b8cbae163_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1770bdb6827189ac134ce0b8cbae163_JaffaCakes118
Size

6KB
MD5

e1770bdb6827189ac134ce0b8cbae163
SHA1

775594a7e54572d6f9e4f4e656955b770b804502
SHA256

6822b40299733cf1c83c285ddca0144977dbacdf2defaa7350bb4e2234a48658
SHA512

6aa107681df6b0207823e1bbbf76bdf79ad25a0aab02189672057dce7e531221306056cb25b171dcbb6118234360fcc7d394cecefcd091537a4d1457caa4e011
SSDEEP

96:U6meQXNcVmqPGdb7xGtEMZnrjROa16c2kNXrYeemRk0UCJp7B:ahXNcUGuMtHRl2kNXs0knCJp7B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1770bdb6827189ac134ce0b8cbae163_JaffaCakes118

Files

e1770bdb6827189ac134ce0b8cbae163_JaffaCakes118
.exe windows:4 windows x86 arch:x86

250fada25686cc1f99410e180db86233

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateThread
ExitProcess
ExitThread
GetTickCount
RtlZeroMemory
Sleep
VirtualAlloc
VirtualFree

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ