f451244ffe6c3a9f4c76e88649250c45_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f451244ffe6c3a9f4c76e88649250c45_JaffaCakes118
Size

739KB
MD5

f451244ffe6c3a9f4c76e88649250c45
SHA1

fba9cb93842f8e9bd2391504d25190ecab68c3d3
SHA256

e95d400b7c53cdc888f7b159cd678fed25b94e063ab330c759b6baa4ec3408ac
SHA512

d2c1cd1eac073d1411d7cc2723b6ffd81d89e9106206b05c2c223a8e3cda19697c891333e293596123ef82c5bbe415f96accecaefdc2d587cb8f45ad28561377
SSDEEP

12288:kpdwTEHqWfxJ6tSncvbH0gjykA5Y5/qu0KNqqkOF0UkjY8ZQgEFiv3nvvZTp9jNp:k7XHqWnEScny9e/q68X7ZQgEFifvvZT1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f451244ffe6c3a9f4c76e88649250c45_JaffaCakes118

Files

f451244ffe6c3a9f4c76e88649250c45_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b2ab9c868a88adb1bc668cb8d724d018

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
LoadLibraryA

Sections

.text
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 660KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE