29686939bd3dd217f654634029e820ce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29686939bd3dd217f654634029e820ce_JaffaCakes118
Size

136KB
MD5

29686939bd3dd217f654634029e820ce
SHA1

826ee00d57c02066b3b6a60fcc02f14d7822c8e0
SHA256

ea327d14e248d9e12635d67784aca50a67c5274d491aa5c79ed9998281fa14f3
SHA512

be49316088227c503ef88a7fffd6871478766770268f9fe4c6783b215ab088fcaf13df797f2eff61c55ea658cb88682a84229ee67dc3d5215bd6a2d4f3eb1253
SSDEEP

3072:NEmOUt2Z+b7moAJPAwXkuc5waTb1i7gi64MqT6VU9rZ01PA:NEmOUUIb7VwPr0YavEX64Mra9v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29686939bd3dd217f654634029e820ce_JaffaCakes118

Files

29686939bd3dd217f654634029e820ce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rawdat
Size: 126KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE