351e37eba67f07f7c4f29e98e9c0a59f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

351e37eba67f07f7c4f29e98e9c0a59f_JaffaCakes118
Size

59KB
MD5

351e37eba67f07f7c4f29e98e9c0a59f
SHA1

f8b9528c0de0b230e188d56248466419b1d32bac
SHA256

2deeb93beb003ee7d3e596f2400ffee65c9630fa422c3befdcce6cd115c6d643
SHA512

5ff2a5f96a2ef6c8ea8fbddc160dee7651a81aa2c6971cf7b62a9a37445c5f7b643c1e96fa4ec5da67e823cf872ff1c4f78e3c119e769db5a5e98612553caadc
SSDEEP

1536:Lj/Mnq4Lw4wRRU7nfT0pZhzdo/STgSTorItZ:v/r8DaC7nb0pZhy/STgSTWIt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
351e37eba67f07f7c4f29e98e9c0a59f_JaffaCakes118

Files

351e37eba67f07f7c4f29e98e9c0a59f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d138b4428074a69c52cd454d3426b9ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA
VirtualAlloc
VirtualFree

Sections

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE