761e67d9b3288a10cab5440a7c36c319_JaffaCakes118 | Triage

Sharing

General

Target

761e67d9b3288a10cab5440a7c36c319_JaffaCakes118
Size

779KB
MD5

761e67d9b3288a10cab5440a7c36c319
SHA1

d5b158b935fe67238ea75d7ad399d768ca04ceae
SHA256

3077f876a0fcb52688de3b59039dfaa2f6550664190b7b8f57a21eb375870f00
SHA512

7828cc590eabc8a8b3c3a1810fcf1f543025b73ebf7b541cc8f5f9adf9ed2f5a76caaff3dc8a808b85845e8244a72883ac69db0128b182ad43bc532ad5796988
SSDEEP

24576:LySWE4Ruh7OZSdAtoKH2tDH52mokdQ3ra1:LyVE4RK7VoE+ra1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
761e67d9b3288a10cab5440a7c36c319_JaffaCakes118

Files

761e67d9b3288a10cab5440a7c36c319_JaffaCakes118
.exe windows:4 windows x86 arch:x86

95dd8565ca0bfb2d2d6ae9b23740c4e0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA

Sections

.scpack
Size: - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 740KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE