2c12ac855b42b988ebfb2bae53e95d27_JaffaCakes118 | Triage

Sharing

General

Target

2c12ac855b42b988ebfb2bae53e95d27_JaffaCakes118
Size

25KB
MD5

2c12ac855b42b988ebfb2bae53e95d27
SHA1

d6581e816925f567c411ce25ff10e9a757741f20
SHA256

69ebdfd6b3358d6c25462f155e1794b1c5650e0fc8a1b3dc350cac5068cad8de
SHA512

0e839e254d962e3fe67c44994fccc4a9f8ab2a0d9f3231f87eba7810a2e35528e1b119b4a53cf70d583b7579661c3a7e05153e9f135a9aad86a6af9e40ff4786
SSDEEP

384:1OLM31kKXyeDVLRD3DhxDTZyUs+H6YQ3I2kdpdNMTF1+sAIip75S9IV/jAsxF6PH:VfdZt3D7Ds3+opkdc+Si55Si7BFo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c12ac855b42b988ebfb2bae53e95d27_JaffaCakes118

Files

2c12ac855b42b988ebfb2bae53e95d27_JaffaCakes118
.exe windows:4 windows x86 arch:x86

572ac795bdddd1d6e220dfb63be25904

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
ExitThread
FindResourceA
LoadResource
SetUnhandledExceptionFilter
Sleep
VirtualAlloc

user32

DispatchMessageA
GetMessageA
KillTimer
SetTimer
TranslateMessage

Sections

.text
Size: 1024B - Virtual size: 582B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 390B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE