78e4ed178f9038636a388fcec4ec8421_JaffaCakes118 | Triage

Sharing

General

Target

78e4ed178f9038636a388fcec4ec8421_JaffaCakes118
Size

541KB
MD5

78e4ed178f9038636a388fcec4ec8421
SHA1

0ef0d1e961e5416d7609bcad9e965419a2593475
SHA256

5daa73942dbe98a38f6579bd2367df21a5473a84f3274bbf77a20b4225ddc359
SHA512

5a887ff91ed4f0e735b6e66caa7c0cfd1e26cbb894b59417e673714ade5e176d06602846b17c24c018c132125576c54c98abf428515bdf9266fc081b8fcb4f8e
SSDEEP

12288:3GLrIZsXaXEk2+PHptW1wJwykfqA61n45Bpshv/Pv+6sd5rw:WLrdKXX2x1RlqAK4TpshXX+zdBw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78e4ed178f9038636a388fcec4ec8421_JaffaCakes118

Files

78e4ed178f9038636a388fcec4ec8421_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.nos
Size: - Virtual size: 244KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ