67678b1219f0354c74c1b754538dbe42_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67678b1219f0354c74c1b754538dbe42_JaffaCakes118
Size

251KB
MD5

67678b1219f0354c74c1b754538dbe42
SHA1

4ba0af7ef2ded15aea20bc794bcb2dda94d0fcde
SHA256

042bc51f0610c6e7464395396a1e37d6d378de39b3360d1d92ad22b70d26a69c
SHA512

7e6cc11e3a4f809b37537559a1ffe42fd5d839fbb0fbc2effbe4dd56ef7573dc376c9cb8fb5f5d54d44c97ae08f829967185647dde73e2e27534fc6869642612
SSDEEP

3072:o92GIeaEkRkuGlxp4CGkN1fZltspZgSeyQ07pjJ5DCGUnLcY9egxrfMLEhIquRjO:oIGIeEI1fepZ5tdCL9dtIqu44T6x4r4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67678b1219f0354c74c1b754538dbe42_JaffaCakes118

Files

67678b1219f0354c74c1b754538dbe42_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.nos
Size: - Virtual size: 244KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ