268761bf689aa0f3f17589704c8f1838_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

268761bf689aa0f3f17589704c8f1838_JaffaCakes118
Size

80KB
MD5

268761bf689aa0f3f17589704c8f1838
SHA1

a60a5cabb2ab0181ed46ca64034935e79bc9b4ea
SHA256

f1a9567568eff8ac309644e07edc7b3836f210005ddb78020be24596d307738d
SHA512

77de683b3c7ed9b68b40041d57488d6763dc767e592f449c4fddd9f86e62f7c3da586bbc417c1f5e7ca8b8c9953dd9f399db7e027d0a362d6cba68f7fdfdce7d
SSDEEP

1536:Dz0oDR9TNoqnsAQy+NQCd42wR2n03C2loLCqHXX9waz/eAw4Fipx:MIR9TNoqnLQyCd42AZ3C2leXX9Lzmz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
268761bf689aa0f3f17589704c8f1838_JaffaCakes118

Files

268761bf689aa0f3f17589704c8f1838_JaffaCakes118
.exe windows:4 windows x86 arch:x86

79b3362178937bf9559741c46bb9e035

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: - Virtual size: 102KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 29KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 532B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.x
Size: 80KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ