367f0bfdca1d818cd799060aed7ebf3a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

367f0bfdca1d818cd799060aed7ebf3a_JaffaCakes118
Size

44KB
MD5

367f0bfdca1d818cd799060aed7ebf3a
SHA1

ba53c34b41690191fdf4f130158f0fee8a01b676
SHA256

216cc54b6af23dab27b7823d09d97d1a5621d88c9fdf6a920159dd2db21c7f32
SHA512

5fd4100b09b31ac2ac73c62ad1ef7fbd8a21be1aa300d57ef068849739fb4eb140cb33e0d72513aa2a133db57cd104070c838a9992db83f11690021adfa8f6ff
SSDEEP

768:Ps/IR3JAJtNbdo3GDyzjyAWv7IiEVo0IBUFAzD3FsbN+xN0MmNetirMp4dvOYkjC:0AtJAJDdN/v7IiEByJzDmkH0fMtirMQ5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
367f0bfdca1d818cd799060aed7ebf3a_JaffaCakes118

Files

367f0bfdca1d818cd799060aed7ebf3a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_TEXT2
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE