1b9252f5e92df81b05e92b7a78a53453_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b9252f5e92df81b05e92b7a78a53453_JaffaCakes118
Size

265KB
MD5

1b9252f5e92df81b05e92b7a78a53453
SHA1

c7df6a23fb593cba6f09771a9ad2920ab59b0d6c
SHA256

c55c620b9cd7086e0bcc41f48e5ea4997d970c837d098b39fcad35dbaa75885e
SHA512

33a9ad70312702e5b22d2ac0d6fa11ca7837e22899f188a8478613d4c5922bbeec4f2e3e96e93cbba761ad6bdafa45ef55f481699564b0f0b160532be29059a4
SSDEEP

6144:kxrEmcTGAdTulF59LooSF/0VqsInWYINgpUgdFY:tsFF59L1SF/WqjxpU9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b9252f5e92df81b05e92b7a78a53453_JaffaCakes118

Files

1b9252f5e92df81b05e92b7a78a53453_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7a7803027531302026dedc7b5f6025f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress

Sections

.text
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 105KB - Virtual size: 980KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE