2aed29033dfb07ece4ac30c52dbfc3b5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2aed29033dfb07ece4ac30c52dbfc3b5_JaffaCakes118
Size

44KB
MD5

2aed29033dfb07ece4ac30c52dbfc3b5
SHA1

8994bf3db6f991529dc29dc9045ffad994586371
SHA256

aa3fb9b2babdf463e2145b07df2124343d3a2870ac2f36bea19cd68a5ac4ed93
SHA512

2395da559aa18a9305d81f407464f7a5453e6aa75cc7e0f882a1614df64d96c22db858b2af6b122ad2940dec1d3d531072ca206bd008a9f0eebc0db5f1fbe51b
SSDEEP

768:aB4/RKNnG12ij65IA1xw4kQLFJR0B9pzUOryGTOcm7Be+VGTf:kMRENCVwxPhJR0QOeOTmA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2aed29033dfb07ece4ac30c52dbfc3b5_JaffaCakes118

Files

2aed29033dfb07ece4ac30c52dbfc3b5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_TEXT2
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE