775d0db7ec0676cfc24f4ff0656bd065_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

775d0db7ec0676cfc24f4ff0656bd065_JaffaCakes118
Size

117KB
MD5

775d0db7ec0676cfc24f4ff0656bd065
SHA1

bae02617d200dd9069dd7be3e0b96aebe220ff14
SHA256

90875ce4f3d1be4591ba93deb1960c2e9e28510f0b1540b440686e8c9cf9aea8
SHA512

b2a9d3bedb2ef0c27a69b5dbec38d52a7c75ef00a0493d02a4d938f9f3cefd32633dabbbade45db70ea51ba153463da1a9c12ae5a1a587844c04abb23a45cb85
SSDEEP

1536:hwIZ7svjYZHN3Xx4blxW1HvJ5RBmDL1WrYDNN:hD2rYmWNJEkcNN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
775d0db7ec0676cfc24f4ff0656bd065_JaffaCakes118

Files

775d0db7ec0676cfc24f4ff0656bd065_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1a474374d833ae2a3c8018790e59abd8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
FreeResource
LoadLibraryW
VerLanguageNameA

Sections

.code
Size: 60KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_MEM_READ