JaffaCakes118_4f19e5070057ebaab5fe2e45362696fb | Triage

Sharing

General

Target

JaffaCakes118_4f19e5070057ebaab5fe2e45362696fb
Size

87KB
MD5

4f19e5070057ebaab5fe2e45362696fb
SHA1

0141745944da5a69c429cbc9b145548312e7954e
SHA256

e241872fc445da8a130c7e67220d6201f40cc3b0adfaad15b7c617b977f5b96c
SHA512

d123d1d453d93e3777f06015f24d6bac40a13dfd03e2ee1b7d9325754186e79d2939b9c75037fccb7751ac6712587e371a346c8517a1951aa7c48858417d64f8
SSDEEP

384:83hBfvdN0ecFrsk8chpHF340+JNjSSN/Me4rY90sNGjsy+BLZBwdUrOJZz/F1pzu:KfMecZp9FPa2Std4MqE/ZydgWvXe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_4f19e5070057ebaab5fe2e45362696fb

Files

JaffaCakes118_4f19e5070057ebaab5fe2e45362696fb
.exe windows:4 windows x86 arch:x86

821dec91e10b38dc5c749a63c1374e1c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
SizeofResource
LoadResource
FindResourceA
WaitForSingleObject
CreateThread
ExitProcess

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 314B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ