2813ffb53e9ed7754dce65a648b470b4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2813ffb53e9ed7754dce65a648b470b4_JaffaCakes118
Size

427KB
MD5

2813ffb53e9ed7754dce65a648b470b4
SHA1

74bce38a752ca3f5a275e51c15f65b3e80484e9c
SHA256

bdcf942e31ada2ef934072c663a6bd5293293137f908adcd120caad6d07c2ce8
SHA512

feba5cedc42235bbc3822973662bb33a8cb6171f1a23dce2f416e29880df7941f19756422736ea435cd5a6f6dd46599066b0567ce6efff3666bd6117c1ecba08
SSDEEP

12288:6aLifayLOTE+KNlgDd+9GsvlxTSROOs52:yayB3f9GsvTO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2813ffb53e9ed7754dce65a648b470b4_JaffaCakes118

Files

2813ffb53e9ed7754dce65a648b470b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5265396cce55c7fc139786d860943929

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SwitchToThread
GetProcAddress
ExitProcess
TerminateProcess
GetModuleHandleW

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ