84c7e503b45873c5a4a2588c2eddb8af_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

84c7e503b45873c5a4a2588c2eddb8af_JaffaCakes118
Size

39KB
MD5

84c7e503b45873c5a4a2588c2eddb8af
SHA1

2a77363484fc5c9bb05659c6df27372ef7d52b0e
SHA256

7ade2312a916c728d91c9d9c2041ac672203b4b5ed3c51fd588e2739427a9978
SHA512

cd346afe73fe4d03100f038e6d6d19fe4ef745ea8cea366afa080c3607b397c10b3a65d49d758a9e9a01d71a2c53401eb7ab38f8af94a998bf62f172724dd509
SSDEEP

768:22Pak52ivSBwJh6QpV0EHvlxQCfU+0MiRWPCNKjWukc:2EjDvYY6Q30EHXLN7jjWu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84c7e503b45873c5a4a2588c2eddb8af_JaffaCakes118

Files

84c7e503b45873c5a4a2588c2eddb8af_JaffaCakes118
.exe windows:1 windows x86 arch:x86

ca3e86898b7fee70ac2d58255fe38125

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
LoadLibraryW
OpenMutexA
GetProcAddress
ExitProcess

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ