276cc5d5ce6a1466fafb4e77acdfcce5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

276cc5d5ce6a1466fafb4e77acdfcce5_JaffaCakes118
Size

32KB
MD5

276cc5d5ce6a1466fafb4e77acdfcce5
SHA1

946b74eeed90d5510f211f574a8b17fe90f205d6
SHA256

2ce9ee8dfcc95ca754abba117ab51a0e46d91cba7b7b91175ffd897fe7a87cf3
SHA512

921ad9acfc8d0e2be76d7017797c7e38687ef55ecb3e6330f74d86b75f338ed0beedca306ee9838c1023e52bb289084563df2c5a2100d8377ff42a1e8a86be6c
SSDEEP

384:4lLrOWUYJzEHZBiFZO0XKiLdgY0x7yXfVsMUhwMj2p3DSJoqTY2bptpfImKDP2:YfONYc+O0RxgVgfqFhwMj2p3DvqM1U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
276cc5d5ce6a1466fafb4e77acdfcce5_JaffaCakes118

Files

276cc5d5ce6a1466fafb4e77acdfcce5_JaffaCakes118
.exe windows:1 windows x86 arch:x86

05c7df6d575c13faf78878f9450f3b20

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
ExitProcess

Sections

.idata
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ