75fab3264fbdb96e292b06c8f3869463_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75fab3264fbdb96e292b06c8f3869463_JaffaCakes118
Size

322KB
MD5

75fab3264fbdb96e292b06c8f3869463
SHA1

f70a37bd40a0629d4e870287fa4d90d2f26e7bb5
SHA256

5efd32cf9243118c2e91debfb2493b162ae1ee22a74315587f86ba2c81d330a0
SHA512

bb97e14ed4b82c8b4d67edf0eaadf44b25621fe3782e94d3c77e2ec4cd4f479dbdba91aefc32d8b7301f8d497ed07649941705e2279fbec3f043b53bb7f327f2
SSDEEP

6144:EIzQc4lEOOFV7sR3O6qp/9ExsyRfh/YAdtjqtFK/aAE3lZFVw8/3:EIf4+OG7sR3Oh/gpRfh/YW+bBRVwk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75fab3264fbdb96e292b06c8f3869463_JaffaCakes118

Files

75fab3264fbdb96e292b06c8f3869463_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 317KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ