83787b24f046d94b655af7db1ad9e098_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83787b24f046d94b655af7db1ad9e098_JaffaCakes118
Size

49KB
MD5

83787b24f046d94b655af7db1ad9e098
SHA1

359103481971504d757f5942382cc1c876682ee1
SHA256

f5257f7a7fed1c4479087ee8851c8ef0176362cbdb2fc75bdb87fcc89558948b
SHA512

a71174c0e77e40ddc4a0d01bb99bf8a4c3d08602bbe0bd72593813a1a8231bee264e368f77f007cef08a4f5a61f439498b41ce1c97da5914bbade07884242385
SSDEEP

768:BrvLtcujp+aIH3p+dty6xP08tDHtD3NQNcYyo/PhFze:N5cEOH3p0ty2DHIlXve

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83787b24f046d94b655af7db1ad9e098_JaffaCakes118

Files

83787b24f046d94b655af7db1ad9e098_JaffaCakes118
.exe windows:4 windows x86 arch:x86

95dd8565ca0bfb2d2d6ae9b23740c4e0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
GetModuleHandleA

Sections

CODE
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE