06f7cbd3ef2f2e4b73ee24cd0d128321_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06f7cbd3ef2f2e4b73ee24cd0d128321_JaffaCakes118
Size

47KB
MD5

06f7cbd3ef2f2e4b73ee24cd0d128321
SHA1

791d883b2cf7b0a43e7fde43614241c1f64798e4
SHA256

b2dda26493dde779ae7ecfe02547ae87c55b2b2582a1bbe85640efcc5b3fcb11
SHA512

100dc2de775baccae9ba584e17058a158927f3b64c93ebae2cbefacdd5cf90013011aadf04f09bf5ddd47cb6fe3606a1a968bfeef74945d70501ac4e6204c6fd
SSDEEP

768:pVoAejhVp1Eaa0sm95v5Mt4tHbPUbXZVPiYGIXrhfytx7W0MD:UTrp1YmT17iXZVi7G0tx7S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06f7cbd3ef2f2e4b73ee24cd0d128321_JaffaCakes118

Files

06f7cbd3ef2f2e4b73ee24cd0d128321_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_TEXT2
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE