29846689c9d2d60cc461875bd9230f78_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29846689c9d2d60cc461875bd9230f78_JaffaCakes118
Size

51KB
MD5

29846689c9d2d60cc461875bd9230f78
SHA1

b1c290c44e51ca4eae830a264f1974e7c4f52b35
SHA256

53ae4f9b149415e2867f0fd27dc0a1918bca71e3682dd27fe05e07cf0585db31
SHA512

44b58c6e0e30bd804ff2c354c3adf2c028165d077f4f7c835849758d58efe569a92abd82ced831002013300ed7d8c74123385b34b01cacc18943bd49cad2b351
SSDEEP

1536:kMHzunRxpibI8aP1r6lPlBkyHZqxSjuDC650k85EG8xubgi5z:pwp0IHN6ltBD8DCS074xub15

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29846689c9d2d60cc461875bd9230f78_JaffaCakes118

Files

29846689c9d2d60cc461875bd9230f78_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_TEXT2
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE