84374f69235f715162635a6f8e564190_JaffaCakes118 | Triage

Sharing

General

Target

84374f69235f715162635a6f8e564190_JaffaCakes118
Size

753KB
MD5

84374f69235f715162635a6f8e564190
SHA1

06d107a47991a63741fc4b78bed7b26e44740266
SHA256

96e522a1f98eba05ad3715f3a7c16dd4a1967f47c0c3d0a984405be0487cf34a
SHA512

d645d4f9be9cc8cd963afa9a61258abd0bdb38475be49baa9ff35a119931f43c214e9d2513f6252894a9240d0862326dfd0aae2745ef4ff0d1522637cf92b2ac
SSDEEP

12288:V1BB57O7l9/LhwHNvoGM+SpVBJyHFxT/Ra/+aedGXKGa9vU+LAdFFWZLxLEL:Q7l9/lIu/nBJ+zFaVedGZK8dFFW9xo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84374f69235f715162635a6f8e564190_JaffaCakes118

Files

84374f69235f715162635a6f8e564190_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a56f115ee5ef2625bd949acaeec66b76

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

Sections

.text
Size: 106KB - Virtual size: 282KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 506KB - Virtual size: 708KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 26KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE