0e5611afd4ab6a79181846ab1b5d56f4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e5611afd4ab6a79181846ab1b5d56f4_JaffaCakes118
Size

241KB
MD5

0e5611afd4ab6a79181846ab1b5d56f4
SHA1

8f2e2a2c4d073a6050430361a9e9cd01b30356e8
SHA256

e6f1877e9cdb654b7f2052f6562b9ce47a70e0f43deb82abecb60bec0355bc0d
SHA512

0145bc24a0a4ae5f1592bb8f207daf96457068435612732b58dce745e1f8de2a0ede6e7ce43e8a288c8ac01cc7da51184d0d580427ec79be63667f4a88603056
SSDEEP

6144:clPI4Ii/wdJS0D4wvLT51FSz1jjWJTvZp8cSJ728JoM7FA:kX4RvL11COJTzIJ7eh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e5611afd4ab6a79181846ab1b5d56f4_JaffaCakes118

Files

0e5611afd4ab6a79181846ab1b5d56f4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

79b3362178937bf9559741c46bb9e035

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 730B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 237KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE