e95658155ba62d4d7eee63ebd075c382_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e95658155ba62d4d7eee63ebd075c382_JaffaCakes118
Size

89KB
MD5

e95658155ba62d4d7eee63ebd075c382
SHA1

0714529268481ff8e21239864f299c8eb6ad59a0
SHA256

8dc23a09516ad510bbdaf08087cece596b88d7b062116fe79e97f3d1e6c06da3
SHA512

0c6a658da9eafdc134f183efe97746a4ad7bda291d2e4a292ad265fdb93fb08d805ca1fa99abe8757fd14b11d9c4dc4a69181fc738f57628b7eb9c1d2eeb045d
SSDEEP

1536:yAImn1FZsi4AEW9WzJo1Mb2tl0jpywy3vFwFQiOWbXGD/6Yb9tlmfzXl:574XeW9bil08w8wDNiWYb9tlIbl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e95658155ba62d4d7eee63ebd075c382_JaffaCakes118

Files

e95658155ba62d4d7eee63ebd075c382_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5a498eee87e4d89512a84502f500181f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA

Sections

.text
Size: 24KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 41KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.teraphy
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE