190d226e48cd57ea9fd0847eb8032169_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

190d226e48cd57ea9fd0847eb8032169_JaffaCakes118
Size

114KB
MD5

190d226e48cd57ea9fd0847eb8032169
SHA1

1e097486425858322f0224ac9740d4300ffa1ed7
SHA256

6e8f60446a7163844abda71a5d7ec519d7e30524e0d5771efc818c24f585bfef
SHA512

cf5ce4c759acc970fdc130f73bef661da7c3efc88809a4358b2d6e4921eca69f6e2ef79de823e4c88a42f4c1455fd295be05811030ed201eab45514c37b1e188
SSDEEP

3072:CBWmJtqghXanaggTygvLcBIFm356LSK7BGS:61q0nXVLVg3kGW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
190d226e48cd57ea9fd0847eb8032169_JaffaCakes118

Files

190d226e48cd57ea9fd0847eb8032169_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 105KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ