426b7b29164010160873b5094d38ef43_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

426b7b29164010160873b5094d38ef43_JaffaCakes118
Size

58KB
MD5

426b7b29164010160873b5094d38ef43
SHA1

d23b09d3ea816c3573816ae7554cf2135c20a089
SHA256

93a8c581936d3335fb79ffdf5cb2e95fb1043e2d2cd3399276af9638d46117bb
SHA512

3264efba76db99093fef785cf1893347e4ad356e59d0bac36da4f57064a262f7152662a48e1eccc881077a0543a7a59db222b169d5c82500002d28c161cdac30
SSDEEP

1536:8Sv2G+UXvHMowPQSzdWN/2LrnuGRXdr1tvUxQwpRn8buYrzh:Hv2GRvHM3PQS5QevJDvIfR0bh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
426b7b29164010160873b5094d38ef43_JaffaCakes118

Files

426b7b29164010160873b5094d38ef43_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE