1519d6c9378dfe24fdd1d7ae609c52ad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1519d6c9378dfe24fdd1d7ae609c52ad_JaffaCakes118
Size

160KB
MD5

1519d6c9378dfe24fdd1d7ae609c52ad
SHA1

b83397471266d2b86d6df06d9e07db6c394c05b3
SHA256

17a0a61fc35a9f95240ddd040c512e311fe389f93d8f08d435d1b2414ccc749e
SHA512

d4a8d72050d8e6163a79e319a30becaadb7d02de95bd29f016b4faf9b6e9ca7a58f912f7174cfd648c469a1289ecb5b7d0e59792e9bf555966d1054bf86c174b
SSDEEP

3072:f03lZyyHSRZsTbVkRCOGkmzlCU7Ek2WMuG+0v7ztgq:81ZyxSar1mxN7ETWMN+07xg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1519d6c9378dfe24fdd1d7ae609c52ad_JaffaCakes118

Files

1519d6c9378dfe24fdd1d7ae609c52ad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2a37aab13b28bd4b2d1cf6aef5c561f8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
LoadLibraryA
GetProcAddress

user32

DispatchMessageA
TranslateMessage
GetMessageA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 314B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ