ff9868cf1f4afbdc41c7cdf98cec73a7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff9868cf1f4afbdc41c7cdf98cec73a7_JaffaCakes118
Size

7KB
MD5

ff9868cf1f4afbdc41c7cdf98cec73a7
SHA1

41aa2856c5fde27ff9c3114a56e64ad1b1821cd7
SHA256

527d24e39f9070484a32702166f4df631650e650916d82bbf567fbf2e35c3f2c
SHA512

0a94985886db813c25a9b21dd4bcbaa650ceef15671a051e239eea1712113f83b16240810e67487702d045cc1e2ac956f35a1e24bc2304b1a96e8fe6ffad9ec1
SSDEEP

192:DmON9TdC45O+Omks6W/Q35LaYhErcC3YKLyK:VwVs6oQSjYKT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff9868cf1f4afbdc41c7cdf98cec73a7_JaffaCakes118

Files

ff9868cf1f4afbdc41c7cdf98cec73a7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

443cfa7757802abc950560429d6dfed1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CreateThread

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 114B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ