2aa5daaad22220b7e622f326fe811685_JaffaCakes118 | Triage

Sharing

General

Target

2aa5daaad22220b7e622f326fe811685_JaffaCakes118
Size

19KB
MD5

2aa5daaad22220b7e622f326fe811685
SHA1

2c86bb3e88fffa0622dbd9c27ab3d4d0bdcd969c
SHA256

6613691b54a801a8b04d777409be7fbcb59cd03695f79d3aa258fe758dd8b726
SHA512

2cc20fcbe6c3e72e6360caee93b926b95433a75026d2890be1efa5664d8fff16389035a8c69118834467ada844db64cb9221c134e5fed18a9bf051b243824a0d
SSDEEP

384:fc5Wo/1IlY78eBB+vzOJpuDoCApPHQhyPhyqVJHXkk+2st0/6KLh:ErylknB+vzO0BApPpPhyqVRXg2so

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2aa5daaad22220b7e622f326fe811685_JaffaCakes118

Files

2aa5daaad22220b7e622f326fe811685_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 576B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE