76ed5dfda9927f2b8855b4474367236a_JaffaCakes118 | Triage

Sharing

General

Target

76ed5dfda9927f2b8855b4474367236a_JaffaCakes118
Size

503KB
MD5

76ed5dfda9927f2b8855b4474367236a
SHA1

50f36f45e84dbb70b8da556b1e1d136f8ead76fd
SHA256

afa69fc0bae31504cd2d0ebb529b153b8b396d99cd2352698d1dd17a41d4b814
SHA512

7de818915e761cd739512a86caadb0532610e99e4b8cffbe604b227347b01da70b8114208200ac728c02f3a96f67458e742b979ada1e11a3ade2a330f54f31d4
SSDEEP

6144:4qseQew6HwolLbgI52iV8MPoRGL3BAFjvkqaAUrQhXCz2+KTDWGY1YozK92T4:4aQn6/BgIYJ64wq/bpY2+KWPm2T4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76ed5dfda9927f2b8855b4474367236a_JaffaCakes118

Files

76ed5dfda9927f2b8855b4474367236a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

79b3362178937bf9559741c46bb9e035

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 730B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 499KB - Virtual size: 498KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE