f9fb87e8245f1903354232e1461f4442_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9fb87e8245f1903354232e1461f4442_JaffaCakes118
Size

13KB
MD5

f9fb87e8245f1903354232e1461f4442
SHA1

d2101b48ebf6932b77019e054483e53244f85992
SHA256

43934925522532c279fa46457cc3d20fa6fe94e6d3bd1ff47189909168e4793f
SHA512

17f85e2d1ed52397f67639e9884386290220e2571387d871cd09e9496bc6ac21c8dd6e3932b331195f15953e8b6dec938a86b947ad099a54d26e2753d78549bb
SSDEEP

384:8tCFAw1kKXkzQbdDRNKdn0nlOtvBDtQhf:8wffSQMR0lORBxQp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9fb87e8245f1903354232e1461f4442_JaffaCakes118

Files

f9fb87e8245f1903354232e1461f4442_JaffaCakes118
.exe windows:4 windows x86 arch:x86

035b7b8f011491b3ad9a6be112ef0713

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FindResourceA
GetProcAddress
LoadLibraryA
LoadResource
SetUnhandledExceptionFilter
Sleep

user32

DispatchMessageA
GetMessageA
KillTimer
SetTimer
TranslateMessage

Sections

.text
Size: 768B - Virtual size: 750B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 394B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE