5a9b51578dbcdb441e3c5a787be8ef2e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a9b51578dbcdb441e3c5a787be8ef2e_JaffaCakes118
Size

502KB
MD5

5a9b51578dbcdb441e3c5a787be8ef2e
SHA1

a4cfac22e0ce59616cd51b5e932e81e21b63559b
SHA256

b48219c576c2d151944cd5870a66c04f7f1f2021f53ca9375c268886bdbe4646
SHA512

bfd3c3ce8f553030dacb8799c01aacff8177bbeea6a1ee40c5d168d32399cd21b66834bf04ebbe1bc1cb743e77d347991bc2f0edbfdf9cebcaec684d4bb41d45
SSDEEP

12288:B9BFGBhiGoxLinvHJHOdYOtSPGClWVIeZu2o7aODA:B9KBhiGodIpHOdNSPGSq/uP3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a9b51578dbcdb441e3c5a787be8ef2e_JaffaCakes118

Files

5a9b51578dbcdb441e3c5a787be8ef2e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

79b3362178937bf9559741c46bb9e035

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 730B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 497KB - Virtual size: 497KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE