7396a09bcf103aa9e55f916ee67175c5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7396a09bcf103aa9e55f916ee67175c5_JaffaCakes118
Size

268KB
MD5

7396a09bcf103aa9e55f916ee67175c5
SHA1

1c226a6cb287a1bc22fdab4fd775fa0c93665cab
SHA256

6f801988bbcbca9a49473ee63f8c963c1113075b46e1e919a20f24021c76bc52
SHA512

5bcd925b3bc7233ba2dc7403c9669b3ddec97a5023cf73dd7d27089b3f62c022d3f28e08c695fce66587e40c83f4d46e46372a96602fc6dea07ef4a6efe25492
SSDEEP

6144:v94f98xhbPVC4falEtBtXVzL3MUYO/CAVKj2kAhTNyL40Per:FIOk4RtdzMUYOBVKmNN9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7396a09bcf103aa9e55f916ee67175c5_JaffaCakes118

Files

7396a09bcf103aa9e55f916ee67175c5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b2ab9c868a88adb1bc668cb8d724d018

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
LoadLibraryA

Exports

Exports

SDP_GetHardwareID

Sections

.text
Size: - Virtual size: 828KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 191KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE