84255113589d8161ae9e993e2b7e2a47_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

84255113589d8161ae9e993e2b7e2a47_JaffaCakes118
Size

99KB
MD5

84255113589d8161ae9e993e2b7e2a47
SHA1

dfc0cab236395afecbe7d41f49a32e192c252a0f
SHA256

7457d33610b6a86940e7742d01951a9c8c210fa1af3da7307302276497c0236b
SHA512

9aa832b4211b4070a1d1a2429a0577b07ace66cc2ab05d62e32558091692c24495ed9764b8af1a63eb3f15a8d68023e11785f353ad93f046d7cb84ef46ddb133
SSDEEP

1536:d7yE7TGM5fP1E6bK+SIVJ9kFIxJRA90DHMSuOLwDI7P7vabHBitUCS4yAROodR:d7rjWI2Fx9MsTEwsDSbItroNodR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84255113589d8161ae9e993e2b7e2a47_JaffaCakes118

Files

84255113589d8161ae9e993e2b7e2a47_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b2ab9c868a88adb1bc668cb8d724d018

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
LoadLibraryA

Sections

.text
Size: - Virtual size: 344KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE