6712064ae253ff12b88b94c51130f193_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6712064ae253ff12b88b94c51130f193_JaffaCakes118
Size

37KB
MD5

6712064ae253ff12b88b94c51130f193
SHA1

8d8491a3087f92abfb1af132e512e72fe69f2b47
SHA256

e22bc185498b56c995f30740cdc1ea544a5be62019ecd9c7c32018ce090a5539
SHA512

effcf8cadf136d012ea21f66a89ba2183c8912c39a255f498abbe13d4f17546575883ca03482b059e186ada1705421c6dac209786f1103017ba6916f8e1618c3
SSDEEP

768:+vO94iaG8o8KjFoj19TCv1KyhBqTfvv/wpvrsKx8QxlZbtwP:eiX8VbuXqTfXmIKx8QVbW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6712064ae253ff12b88b94c51130f193_JaffaCakes118

Files

6712064ae253ff12b88b94c51130f193_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1431665acb936e7aba2754059e96ae4a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetStartupInfoA
GetThreadLocale

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ