1520243a28df3f31e9c4e8f838bdf422_JaffaCakes118 | Triage

Sharing

General

Target

1520243a28df3f31e9c4e8f838bdf422_JaffaCakes118
Size

9KB
MD5

1520243a28df3f31e9c4e8f838bdf422
SHA1

62a9d644a29f4e2ad879c8d3c0acc32f927e019c
SHA256

7a3cdbfbf5954d5e8a7a7f02b214604390b9eba8af0d57ac70b7d1a4c8b16d6a
SHA512

0ece101f3773580c9fc63cd4ac12b7917af149d8ae2bb98f5e71eb7a619cde222a3348992f7a73717409e72c792c31b5748e5ecf8f836a23d4a26702cc0f324b
SSDEEP

192:0pk/AB4werlvXy0cw9rCBTOjSFS20uQRpW9rtLBFjuxw:Aerlvi0cEm4120uQXWhu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1520243a28df3f31e9c4e8f838bdf422_JaffaCakes118

Files

1520243a28df3f31e9c4e8f838bdf422_JaffaCakes118
.exe windows:4 windows x86 arch:x86

323250f2491b58f37bdb5e0f556eb2d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadCodePtr
HeapFree
GetProcAddress
HeapAlloc
GetProcessHeap
ExitProcess

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ