78a088b1e9e0e10728a003238a58361a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78a088b1e9e0e10728a003238a58361a_JaffaCakes118
Size

51KB
MD5

78a088b1e9e0e10728a003238a58361a
SHA1

bb5b03753c5142706b2655d796dd7cf806b28458
SHA256

cd741abbd0b4cd5c56f4e9bfc27ca84c3a0dec8bd519eb8b2c3c27cca8e0171e
SHA512

ae70158beb67cc67a26672e36470a5ef1d32db5f0c83f84bfac5e0e775dae26feca8f755a8c629d3068218a1614e1cae6646477c459f5848815bdad6f99c01e3
SSDEEP

768:B0j0aoKFcujp+aIH3p+dty6xP08+aWZmRVvLCJ3owsfT:W0aoUcEOH3p0ty30zvLCgr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78a088b1e9e0e10728a003238a58361a_JaffaCakes118

Files

78a088b1e9e0e10728a003238a58361a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

95dd8565ca0bfb2d2d6ae9b23740c4e0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
GetModuleHandleA

Sections

CODE
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE