75222e764d41ebed5544a66e2b52767e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75222e764d41ebed5544a66e2b52767e_JaffaCakes118
Size

160KB
MD5

75222e764d41ebed5544a66e2b52767e
SHA1

236b42a0618cb3cca663db0d38ef60ed5d1fd025
SHA256

ad16ad80fcf9230e712d0c4ddd87fe3fb406774d4611b948d3ca0ed8259644be
SHA512

5cba79e9b4df3b49e19b9aaca7db1fb1614345023cd6f313aa6d9e06c6ab8e5b9b4c145a60b28f3803f8a34d659cf8137e95945c36d93c8c8d339a0a4773fc2f
SSDEEP

3072:VAj2rUSMm4EKY1N530Pu5JiM/4mQTJ42ef4gfjI3kHCMZ7eFaH5K:VAj2rD9K56Jl/1aJro4gfReu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75222e764d41ebed5544a66e2b52767e_JaffaCakes118

Files

75222e764d41ebed5544a66e2b52767e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

79b3362178937bf9559741c46bb9e035

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE