0d9bdb8aa714a0eb0d1d6feda8865813_JaffaCakes118 | Triage

Sharing

General

Target

0d9bdb8aa714a0eb0d1d6feda8865813_JaffaCakes118
Size

38KB
MD5

0d9bdb8aa714a0eb0d1d6feda8865813
SHA1

1d19237afa5997d081e2c0494df154ead8aedff7
SHA256

5f285a93244d81ecce382cce14e761fb785cbf6defd932adae521731aee537e4
SHA512

d888428fc95d2b956183ea1fd7f9ef7df22d242b2c4cf0805df0121d80f6b0df889989cd9736fb98510b2b8d9a572363822dcf3770b0d87ba364ebc4c63997af
SSDEEP

768:NooKCpby7NSm3fhHDYO/T83O4CYyhmX2YTK:QCpby5S0JHluO4khmXJK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d9bdb8aa714a0eb0d1d6feda8865813_JaffaCakes118

Files

0d9bdb8aa714a0eb0d1d6feda8865813_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1c83f36882f247e891920581bdd657e8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetModuleHandleW
CreateFileA
GetModuleHandleA
GetLastError
GetProcAddress

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 442B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ