264d6744081de38d0739931692eaaf2f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

264d6744081de38d0739931692eaaf2f_JaffaCakes118
Size

13KB
MD5

264d6744081de38d0739931692eaaf2f
SHA1

b5733247613347689a791fd5f0a03ce20f6ae5a6
SHA256

a75e4011062bcc4ea02e25fd8ec03c0754871d12a8980d1607300aba2dd9988a
SHA512

041a976cc8d1e917377f3c5f92f8ccf8b1a1de4bf5a888f222446a8499ae9b5bc985a0bada8d21bac2da323d27c602f3a6671dd5cdbdf0a690e3b1327b11c732
SSDEEP

192:79JbRloEPcjPv72MroCJj2F2FZkPD5aOuK+k/eb/SkHkur8dojJv0JN:73FloE0/VrTJjhLkPIOx/ejSO/8olMH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
264d6744081de38d0739931692eaaf2f_JaffaCakes118

Files

264d6744081de38d0739931692eaaf2f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0b73cda72d2f5cb6bccc46f6ee7d366f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateWaitableTimerA
ExitProcess
FindResourceA
GetLastError
GetProcAddress
LoadLibraryA
LoadResource
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SleepEx
VirtualAlloc
VirtualFree

Sections

.text
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ