ed84addde6b0760f963aec152873a70a_JaffaCakes118 | Triage

Sharing

General

Target

ed84addde6b0760f963aec152873a70a_JaffaCakes118
Size

27KB
MD5

ed84addde6b0760f963aec152873a70a
SHA1

7a2a29f818d088c7e92255b92d2fbe0cf1b8eb05
SHA256

c7a48bdc25a9bbfa92caac4d68190a2a8b53eed0a62e3ad1a9235629fe63cb9a
SHA512

0e13de9bbe7fdfac5adf8337010796cd570548d149e134fc8e3c730aed43d8aa609e104bc0d27c1e387309d5b71b07221368eb857092ae3ba61914947af31a81
SSDEEP

768:uxvFTGinV+sFAGyQal0h1kLw+0wlTUZCCO:uxvFRF2Qa6/kiwlAZCC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed84addde6b0760f963aec152873a70a_JaffaCakes118

Files

ed84addde6b0760f963aec152873a70a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE