2261ca78c95187bac9d481d17c592a6d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2261ca78c95187bac9d481d17c592a6d_JaffaCakes118
Size

15KB
MD5

2261ca78c95187bac9d481d17c592a6d
SHA1

5aa5bda8e2fb3781dcf6d4400f9c03c677c296ca
SHA256

340c24763bc9b3654e4f4d98e263df19b17595be3e674653b9ff0dfe2187baa4
SHA512

c7d2b3905cabaa7f8145bf9d8e1b0eb47501367a15353679f3db2e60417353640c919b0dfbb9fe557eb4cbf22e2154ace5e97216bfa1a5544d56eec4856e6e84
SSDEEP

384:lxI0QdbvkvZsuaKNijxITkuOvcywp5GNQQM:7QWBsuarxvuOEywpXQM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2261ca78c95187bac9d481d17c592a6d_JaffaCakes118

Files

2261ca78c95187bac9d481d17c592a6d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 72KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 48KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE