194193e151e3ac917b1b57dd1611edff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

194193e151e3ac917b1b57dd1611edff_JaffaCakes118
Size

614KB
MD5

194193e151e3ac917b1b57dd1611edff
SHA1

072238c68268cebd3422ea5a4aadbf0b652e817a
SHA256

4ee23023a5a3e2efa57c70751cc02a668c3118a5da4d8c2708ebdcb61d843c96
SHA512

06b5668f8eabc49c01b95044b3173983fdbe557fc11543a4b77c04112a7459fc4733337584834317e4f172c96fe8ae94130d66bfce1a8e09078030639216b389
SSDEEP

12288:3GLrIZsXaXEk2+PHptW1wJwykfqA61n45Bpshv/Pv+6sd5rtI5QqLVK:WLrdKXX2x1RlqAK4TpshXX+zdBRqLVK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
194193e151e3ac917b1b57dd1611edff_JaffaCakes118

Files

194193e151e3ac917b1b57dd1611edff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.nos
Size: - Virtual size: 244KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ