2d15c1fdb5594dc9d20a8e677006d3e4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d15c1fdb5594dc9d20a8e677006d3e4_JaffaCakes118
Size

43KB
MD5

2d15c1fdb5594dc9d20a8e677006d3e4
SHA1

3a8b223c4eed8e3f8d08649df56f038c76648dd4
SHA256

d98414a1c4189cd36f46f7b95217b84a8a7d45672a91f63e309c7baaff9a5376
SHA512

0cadfc0e5617b918f704bda7555775da68d1600844321ae124d85f1517a1f9e12e35f364cdb59b721ad9a0bced40b9ee678b5f48bc88636ff06646f788cc9669
SSDEEP

768:7WLSbI/H1uaW6d4Sxo3RlcuUtUAJIfDNCrcUflMoEjiILrXuy9OAO:7Wz/1jd4xfcuUtUz5Cr1flZGdDj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d15c1fdb5594dc9d20a8e677006d3e4_JaffaCakes118

Files

2d15c1fdb5594dc9d20a8e677006d3e4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_TEXT2
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE