84131e98e48f681e01254e2ed0e0149d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

84131e98e48f681e01254e2ed0e0149d_JaffaCakes118
Size

38KB
MD5

84131e98e48f681e01254e2ed0e0149d
SHA1

3c7ecf701c310a608633beb6a4e74578c9195bfa
SHA256

a482601645758dc85bfd74bca5590b4c73476742aee25ba48e8474e4211ddce6
SHA512

5efd3e11c9120bc8090633f45b09f9e0e9f14bdf41ed6e06c52d16bb1647dd2793dfc930c5dec97eccc6d0f929e689ba1e0b2b0227999f5950f5e3c1dfe95a2d
SSDEEP

768:5lIKks/Dd/ZdMS4UKnFSPMaXJy6Kwk3ZLi:5K90R/rMSin0PMv6Lkp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84131e98e48f681e01254e2ed0e0149d_JaffaCakes118

Files

84131e98e48f681e01254e2ed0e0149d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f73e1aa5f9fc17bf3bf7c6328924c65f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
ExitProcess
VirtualProtect
GetProcAddress
IsValidLocale

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 242B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ