fac477bba27f180c11738f0173d7a40c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fac477bba27f180c11738f0173d7a40c_JaffaCakes118
Size

15KB
MD5

fac477bba27f180c11738f0173d7a40c
SHA1

58fc6b11fad894afd63b08963a97c9b9feb57652
SHA256

1e630c5f15e408cd2a937c6cc12b3e152d2aef53a3fef6e595f62ec86300e9cb
SHA512

1f38d1daf4a196fdb1d38d4659ba36428e922481a1b928ac05489e5f77986fa4f060d558a213895369aafc9bf4061a65e94adaca367c64f455977769f8230792
SSDEEP

384:oNFloE0Pf/SkChw60EV0KUm/pnLpmYOS:KF4PqaMUu1m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fac477bba27f180c11738f0173d7a40c_JaffaCakes118

Files

fac477bba27f180c11738f0173d7a40c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0b73cda72d2f5cb6bccc46f6ee7d366f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateWaitableTimerA
ExitProcess
FindResourceA
GetLastError
GetProcAddress
LoadLibraryA
LoadResource
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SleepEx
VirtualAlloc
VirtualFree

Sections

.text
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE