419558deac899b44802809cc1bf45501_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

419558deac899b44802809cc1bf45501_JaffaCakes118
Size

17KB
MD5

419558deac899b44802809cc1bf45501
SHA1

610738e83e22328881c7c724253cd7e479d177d0
SHA256

b2ebae81d81cbdbda546a07219e5616ca2ad0c1a3a7690c6a254c36211b87920
SHA512

714de8a9e6040879a38efa051a841f612aded693083810276a382e5ebfec92ebcd91a7df524fdca531990f9436fdb09976a6cfb378bc458dd464a10053085d61
SSDEEP

384:dETmj0p6F2KA5MLXib2Cpw+MI+JBsk2DUIJM4DuIjxT:vGl5Vbbp+N2DU6M46It

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
419558deac899b44802809cc1bf45501_JaffaCakes118

Files

419558deac899b44802809cc1bf45501_JaffaCakes118
.exe windows:4 windows x86 arch:x86

64a8ee0a5a9bad5b8e47bc9e1ee0d7ee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
lstrcmpW
TlsGetValue
GlobalDeleteAtom
CreateProcessW
EnumSystemLocalesW
GlobalFindAtomW
DeleteFileW
GetProcAddress
EndUpdateResourceW
GetModuleHandleW

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 403KB - Virtual size: 403KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ