3c2a0e83750ce5f730fc5d68bb22d93f_JaffaCakes118 | Triage

Sharing

General

Target

3c2a0e83750ce5f730fc5d68bb22d93f_JaffaCakes118
Size

22KB
MD5

3c2a0e83750ce5f730fc5d68bb22d93f
SHA1

525be3e7e672cea78e070f1480e3521da9694bdd
SHA256

78cb48d4f58ead0a1d6b9e20bccfd164c53a541f4476b3007b41087dea5f269b
SHA512

98c9ea640f0970902528be640d4ae0fcdde70a9dba5e47e63981be580cfbe47f3543c68cfd03d14b492f5dc35ce1b4c880357002b3f9b49dabb3143079d92549
SSDEEP

384:ypsSpg11+XCEuQ+M31f1AVe2NUwznHPPbMcYmszuK/UActaaKnhLIgL:aps8Cqxf1j2NUOoXzXTZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c2a0e83750ce5f730fc5d68bb22d93f_JaffaCakes118

Files

3c2a0e83750ce5f730fc5d68bb22d93f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

28c24e21737d2dc66ce987a29325e725

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
lstrlenA
GetModuleFileNameA
GlobalAlloc

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE