150ba92a283bc21f37866e8ea7bd44ac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

150ba92a283bc21f37866e8ea7bd44ac_JaffaCakes118
Size

379KB
MD5

150ba92a283bc21f37866e8ea7bd44ac
SHA1

6f75cbc8ac52a388ac267bf5982020c7097754c7
SHA256

9f302816b71bc2ace30ace0d2875945ed581603283fe596daf811529e81d8184
SHA512

db11331d90b7c14e4edb8bb6f61ffc02fe6af87ad94ed625f247f3ae9e6f51aaa47f534b42671653a8a10de2e2f6f05a52bfa85c3c03d782c8285e5188f77b61
SSDEEP

6144:U4wI9zVt6kp+oYGKl/KQmm6RdTNbbSrQR8CJjFcxl3iv/cHNt5AS1ngiVoGrH0:UMzD6rT7mHRLb+AJZyKCNDI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
150ba92a283bc21f37866e8ea7bd44ac_JaffaCakes118

Files

150ba92a283bc21f37866e8ea7bd44ac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.gao2
Size: - Virtual size: 780KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gao1
Size: 374KB - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gao
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ