73985055be7572ef4f802e9ed04c1dc9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73985055be7572ef4f802e9ed04c1dc9_JaffaCakes118
Size

160KB
MD5

73985055be7572ef4f802e9ed04c1dc9
SHA1

5124cdb418433b074b51c1c8158e5f8e494625d7
SHA256

b017740aab4d662c6cbb3627bbe7a13ccd145fc483e1395ee2b60aee3954ee9d
SHA512

6c1c622cff1d80fb1fcaaa3ad8bec1ce864383e58fceeffaf4b492961268f7a0a6bfe343471c7e2490e78dda3804ca418df22e60b49179152d7bad758b2d7759
SSDEEP

3072:J7Nisg+YuanK28UxoQM9wHdAuB9vs33cTWpm/CRhWJwaH5KA:JNisgjK2XuKFB9v43K/CREJwu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73985055be7572ef4f802e9ed04c1dc9_JaffaCakes118

Files

73985055be7572ef4f802e9ed04c1dc9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

79b3362178937bf9559741c46bb9e035

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE