83823476072bdaf932a9a61bae5b4227_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83823476072bdaf932a9a61bae5b4227_JaffaCakes118
Size

104KB
MD5

83823476072bdaf932a9a61bae5b4227
SHA1

9750f66219189df1170d89e825792a1ef2b45db5
SHA256

7c3e312de57d5128d512d2474addeb576286d2d22f423f66574f6d2511a492a0
SHA512

f1317cb6df71d64bf0649ba3354b4557e71f1f0ab961e7000911a2d554fccbae8deec9f22a8392d11ed720ea98beb0934ff4e1327cfadd43069e3068f047e866
SSDEEP

1536:SzOgjudA5ZezaqYQuicJGxxm9fX4nrSBCn0PYr6668MaBC1bGl87fQbZE06FCC:SKAuekaqY1ivzm9ArSBLQKra41bG27jr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83823476072bdaf932a9a61bae5b4227_JaffaCakes118

Files

83823476072bdaf932a9a61bae5b4227_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rawdat
Size: 94KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE