fb54d682603fb51ae53d68a3daf039d5_JaffaCakes118 | Triage

Sharing

General

Target

fb54d682603fb51ae53d68a3daf039d5_JaffaCakes118
Size

34KB
MD5

fb54d682603fb51ae53d68a3daf039d5
SHA1

2ee5e24bf19a003fc15815a363c721f4e630467b
SHA256

17a47c7f0a685fbdd6d206cfd2338452600c78155726dda1fe37750738531d73
SHA512

8c91342ff8e82f7e79ce6a8905285a3810ab58d57469e9280c328704cc607f8ee353dc0e991116e0e17d21d0330b8473a163bb9631bab6862e27dba203c34254
SSDEEP

768:DtsdrvuiANvJloRZmF1Q0WbwNX70mWbA2WCrc:D+rGi6JlmZmF1Q0WcNX70mW/o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb54d682603fb51ae53d68a3daf039d5_JaffaCakes118

Files

fb54d682603fb51ae53d68a3daf039d5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

kkrunchy
Size: 30KB - Virtual size: 5.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE