38eac97ce9095705e900c6bb7b00d288_JaffaCakes118 | Triage

Sharing

General

Target

38eac97ce9095705e900c6bb7b00d288_JaffaCakes118
Size

25KB
MD5

38eac97ce9095705e900c6bb7b00d288
SHA1

c34bd018ead6a43e5a9ac675ead6c433f303d93d
SHA256

2d2fbb17aa4e1943f216191d9a54cde9e52b101a695f9ab9c848596f728e5a22
SHA512

1a3506523111cde9326c82c862e8aac6b641a9e7b40ae6315d600ee47fce1bbef011fb446580801a5ba59a7e6ef436264c5f7b19d641d22a8a73b2b7ad996115
SSDEEP

384:fHoRFzqlkZ7TTWKptW9fsi7nS+iO1b53EeO24FQJgvizoFxH5QobiZF5jv+kV:voRgliCKps5s4nS+iO1bl4FQPExmo6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38eac97ce9095705e900c6bb7b00d288_JaffaCakes118

Files

38eac97ce9095705e900c6bb7b00d288_JaffaCakes118
.exe windows:4 windows x86 arch:x86

79b3362178937bf9559741c46bb9e035

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: - Virtual size: 25KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 476B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.p
Size: 24KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ