439c217ea9f91f94d63e906f2ba40f25_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

439c217ea9f91f94d63e906f2ba40f25_JaffaCakes118
Size

16KB
MD5

439c217ea9f91f94d63e906f2ba40f25
SHA1

8361c0d4823a143421fe39d41034bc9457f3976f
SHA256

7ccfe178d3b5a7f3ab824eb6c49f419e44e431ab7730fd48790856b7c7afbf4e
SHA512

bb9b003c3c83898c3f1b7a1bc85731ca63da795bee0dbe996d1a47af210cfceb8b0db9366c81fb94c93e55654173826dfa3704f0630ab5ee79d7eae7d9a889af
SSDEEP

192:0DYrHNglo1l4s8dXqn3PPTPp6ZDOZr0r2/kJSgR2AdXJGsJ52r7:hTNglo1l4tlc/PTPcIur20SgU6XJG1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
439c217ea9f91f94d63e906f2ba40f25_JaffaCakes118

Files

439c217ea9f91f94d63e906f2ba40f25_JaffaCakes118
.exe windows:4 windows x86 arch:x86

76b6e0e9b3cb6de9362c3a44e352d5b3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateWaitableTimerA
ExitProcess
FindResourceA
GetLastError
GetProcAddress
LoadLibraryA
LoadResource
SetWaitableTimer
Sleep
SleepEx
VirtualAlloc
VirtualFree

Sections

.text
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 346B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE