8560e5fcc782be0d2db833d10110a9c6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8560e5fcc782be0d2db833d10110a9c6_JaffaCakes118
Size

51KB
MD5

8560e5fcc782be0d2db833d10110a9c6
SHA1

1cfef3319334d093f858f238fddbac910753ce34
SHA256

98cc4140af58c371c1ed04b04c7544a034d026810eb65f9f0e599d8baae266dd
SHA512

99c9af2f8622aec5a4ae762284038d44e375371528f03153831b0d471f851bfd1309573a643f465fd19315ca536560e581ce37a6adb07fed49cfcb9b4183c6f9
SSDEEP

1536:WVPriPxJ8IgFGhTgNe5drDbnd+f0NyILql:eIxOATDhmCyIOl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8560e5fcc782be0d2db833d10110a9c6_JaffaCakes118

Files

8560e5fcc782be0d2db833d10110a9c6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_TEXT2
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE