21dde7ae91fb69c94c00125c3987e1d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21dde7ae91fb69c94c00125c3987e1d0_JaffaCakes118
Size

71KB
MD5

21dde7ae91fb69c94c00125c3987e1d0
SHA1

bc2a9b958bd09e351b765e1162f4b5d084bae8ba
SHA256

7ae24029472be276eccd4ed3cc78b5cd55731a023190dfc04bee9b36a24cfd92
SHA512

28b63b8f7acdf02d4ffce85460f18e6367764cff72730ff10dfc955c70f4cc3b25b1ddc6c8ac0f7cddcebe661777e6ae66fbd76dbba39090ca8c87e095a77337
SSDEEP

1536:zBbKrd7hhTU3MpPvQ6rONUrcyVUeNxrOVJst2Ihm4TfUW:YrdrT7R46cM7O8hm4QW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21dde7ae91fb69c94c00125c3987e1d0_JaffaCakes118

Files

21dde7ae91fb69c94c00125c3987e1d0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

647b2d25b4821905b4195ff7a6455b54

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress

Sections

Y7+DIZ7G
Size: 512B - Virtual size: 88KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

30$IFJc-
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

63sxi-d+
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1bxB]FY
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE