edf791f4dd610eee82a84aa0921af8c5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

edf791f4dd610eee82a84aa0921af8c5_JaffaCakes118
Size

341KB
MD5

edf791f4dd610eee82a84aa0921af8c5
SHA1

0de5aa68e80b4a33d704c10462c70c5e9e92bda3
SHA256

db9e62e5f80201a2a184d3e2c535b6b8810c5495b8135c277929a1458a4a1905
SHA512

1997cbbd7918a5dbe891bbb52712546148aa7674de645910f2e4751cd4d0d8b68a32d6c04618f31e23d78fd3cc5e48bddcf3b21e66e294d68a3299fb00897aeb
SSDEEP

6144:v1nO8sAC6OYUlLjWQfpqzZW/MslAxFChBORkaaeyK3SziqWCYV65hQs:v1nO8u6OYqfWQEzgDvORk3IBqN7D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
edf791f4dd610eee82a84aa0921af8c5_JaffaCakes118

Files

edf791f4dd610eee82a84aa0921af8c5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

79b3362178937bf9559741c46bb9e035

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: - Virtual size: 551KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 69KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 25KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 323KB - Virtual size: 333KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ