34da3fe3df458f2c3f28a03d7459b47b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34da3fe3df458f2c3f28a03d7459b47b_JaffaCakes118
Size

23KB
MD5

34da3fe3df458f2c3f28a03d7459b47b
SHA1

3af6e4693596777a0d98abf3530b90157f35e135
SHA256

1b6570b880cb18b3a00ab30dc6984ad87d6e1cdbd72de6e36130bf580b51851b
SHA512

8437d44c0cde10a2957dcd9eeb3bc06ebc58fed206ead4a137273974bcd82690bdccaf5a026bf43c009723c097eb78b56e3f1daf894ae44e223e1427db840bbd
SSDEEP

384:ma51fVl/yUbuXxFuTt3yFg/WGpzkT2WgxiJhwXxzNTtXx:VVlqUqXPWtGgjRGgM/G5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34da3fe3df458f2c3f28a03d7459b47b_JaffaCakes118

Files

34da3fe3df458f2c3f28a03d7459b47b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

180a397cf28c7850a8a65c6b7cd37006

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
lstrlenA
FreeLibrary
lstrcatA
GetProcAddress

msvcrt

strlen
_strdup

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 498B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ