178aa7ce961f60e5731f95c578bb0f2d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

178aa7ce961f60e5731f95c578bb0f2d_JaffaCakes118
Size

285KB
MD5

178aa7ce961f60e5731f95c578bb0f2d
SHA1

b2c30e98ea0b6a2ec86d8588809af137ad10c3d1
SHA256

65b59f72343b840221d434122a03ebf9212d1b8fb52a92bf503f23cffa5ca36a
SHA512

5281dcbf32388dcc519da44f579e1e053d109717dd1d4d3d054a7a3c20e6cbd4a753e64b50e99d40bc4cedcdbe290629995d35f7fcdd1ef219647002ae0ee160
SSDEEP

6144:7LE09TbrEZADiY0KKkqs8xRHKkbI3AmzPFrWdxao/i:E0BbrFiL/kqBxRHb0XNS4o/i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
178aa7ce961f60e5731f95c578bb0f2d_JaffaCakes118

Files

178aa7ce961f60e5731f95c578bb0f2d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 280KB - Virtual size: 756KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ