075d62f9f15bc8e3f83c7a9ad9281d65_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

075d62f9f15bc8e3f83c7a9ad9281d65_JaffaCakes118
Size

242KB
MD5

075d62f9f15bc8e3f83c7a9ad9281d65
SHA1

8ef73b833149081352619d3d1b87df7b0b52a8e8
SHA256

e51bf5150cdc526000d0fba4a9b98797e44405680d9def4e6c2a2d859c1bc0cb
SHA512

a5215f5c8fda869d2ed3c58108aa490cad7e1f228f4b1eacf9054ff2fd5911d34f90ff00d6be8584526063332385161837a846393e4d9f27f736308f8d333d04
SSDEEP

6144:dcCrmVwuLb5B4ov6aFkpkJKj+jWmg+fFqNT5NCW3DaPjMQs:qPnSkKSiT+i5NCWzab

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
075d62f9f15bc8e3f83c7a9ad9281d65_JaffaCakes118

Files

075d62f9f15bc8e3f83c7a9ad9281d65_JaffaCakes118
.exe windows:5 windows x86 arch:x86

79b3362178937bf9559741c46bb9e035

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 730B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 238KB - Virtual size: 237KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE