2d106a670f7f9a169ae1fb920b384b79_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d106a670f7f9a169ae1fb920b384b79_JaffaCakes118
Size

56KB
MD5

2d106a670f7f9a169ae1fb920b384b79
SHA1

fa47b3523213fc0470a3494e854488be9a4de77d
SHA256

a0acbf9763074f91b3e3873774d1333a0893c7426ba6063e414e82600ea78bfb
SHA512

3cb5caa070700391c4699fc804756d8036ca4bb4c45529014332858a55c5ae752b7497d36ec907e53ebc30524f6175095135e15baa9fa269556243f5456b6067
SSDEEP

1536:6TdytmznUkJTbcBPQtXCUP5rKdQz4nBxP5luKX:Udy0znnbpDlszKKX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d106a670f7f9a169ae1fb920b384b79_JaffaCakes118

Files

2d106a670f7f9a169ae1fb920b384b79_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 72KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 48KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE