5bd2a3cb49c8cf0fdec2f5483d47c6f4_JaffaCakes118 | Triage

Sharing

General

Target

5bd2a3cb49c8cf0fdec2f5483d47c6f4_JaffaCakes118
Size

6KB
MD5

5bd2a3cb49c8cf0fdec2f5483d47c6f4
SHA1

c04f787311f265cf74b693cb6eb0c145a094bc93
SHA256

90107a6bae0000731712ad2b23e9afde617a059920f74c88346cc34ad01fa48d
SHA512

bbed867fdd24d69de9f03acfc095bc9bcb253f941a623fff914dd93587d55f912e10dcbedf9d8bda8cf9732b1322aeafea845875710b6edbd019d4060e8d5abf
SSDEEP

96:mvepnTeG25WWAFBpU5Volqa4+tlacuo06hUUNC8Pb2+UKKUJXB2:mGpCG25NAFUjoOGugv5BG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bd2a3cb49c8cf0fdec2f5483d47c6f4_JaffaCakes118

Files

5bd2a3cb49c8cf0fdec2f5483d47c6f4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

79b3362178937bf9559741c46bb9e035

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ