773f822134e4fb0722eee30dd7cba87b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

773f822134e4fb0722eee30dd7cba87b_JaffaCakes118
Size

140KB
MD5

773f822134e4fb0722eee30dd7cba87b
SHA1

6717667717c8e2bd3e6a938334d373ebec00b1cd
SHA256

1cc57a6e3dd53539e96cd12554199022e9ddf1dc563a5c7acc6bd9d65b088cdf
SHA512

517020902d9acd722764b663bfe8ced17399431dc69564c5bc08c418f74aa28d4b20e716a7ba6902406ffdf34d159ea4a73129dc7833162d2cf4cf471201a82e
SSDEEP

3072:hA16T5YL0ReiAkKBZDU3IjwItlGbUVhgFIr9m6W/HAuwV7O:hGFL0RTKBZDRbeYbgehm6W/gN7O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
773f822134e4fb0722eee30dd7cba87b_JaffaCakes118

Files

773f822134e4fb0722eee30dd7cba87b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

99fc69d43b9cd9fe874a0947318e4eef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
TerminateProcess
OpenProcess
GetProcAddress
LoadLibraryA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rawdat
Size: 125KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE