f463323c4760ca1e37eef8cdd90dfd6c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f463323c4760ca1e37eef8cdd90dfd6c_JaffaCakes118
Size

58KB
MD5

f463323c4760ca1e37eef8cdd90dfd6c
SHA1

7f560063f9002bbb7830160df7a530d63a7b68d5
SHA256

b75999c3b61dd4cacaa490fe3b5856f27c780c196608a1c8662b0d9125b5bd24
SHA512

67b7c56734ccf36ff8c415c33ed3c6fb03bff22cabb379812198a58b0954b4175137a45f3cfd24c6cbf5a608c478df34139faaf10c4fd6a06bfd8cee5783730a
SSDEEP

1536:dTdytmznUkJTbcBPQtXCUP5rKdQz4nBxP5lW061:ldy0znnbpDlszy06

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f463323c4760ca1e37eef8cdd90dfd6c_JaffaCakes118

Files

f463323c4760ca1e37eef8cdd90dfd6c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 72KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE