165a63fbd711c5dde3ff40bd651ad3f5_JaffaCakes118 | Triage

Sharing

General

Target

165a63fbd711c5dde3ff40bd651ad3f5_JaffaCakes118
Size

188KB
MD5

165a63fbd711c5dde3ff40bd651ad3f5
SHA1

f2071cdf9b9121f41d7ae2e31ca9b2675ce309bc
SHA256

8d9d921a3f5dc6efe07b3914c66a162c39e96d6914790dede8dc81f54283e2a3
SHA512

5d05073fa2639ab662cf9fc345a771bcb7eefd1bb6c219e842bd8e46663d6895bd60f320b4e4f0f7e3695f86b9c8b4a2f5aa6784d814254e0ff73fe5017f49d7
SSDEEP

3072:BNL/9R9vt75dm3XKoi8BoUsDrJbIFPOHB74KG8IDyWDKQ+wZt4IiMKqTdl80/NSK:v5trm3XKoiUTKrJbIFniNWDX+5IiM9DL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
165a63fbd711c5dde3ff40bd651ad3f5_JaffaCakes118

Files

165a63fbd711c5dde3ff40bd651ad3f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

99fc69d43b9cd9fe874a0947318e4eef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
TerminateProcess
OpenProcess
GetProcAddress
LoadLibraryA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rawdat
Size: 172KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE