8c2babf4fb070ed16ec312af1a735a3f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c2babf4fb070ed16ec312af1a735a3f_JaffaCakes118
Size

172KB
MD5

8c2babf4fb070ed16ec312af1a735a3f
SHA1

9d67b9a03ce603efe9c02ede0ee3b9bfa4de3aff
SHA256

b4d6511a23254e6824bc95c9c405355176928e9ac36acc2956ab76ec4ae7d4fe
SHA512

bf39136c6eec848b346c8827c965806716bec14d46693cd57bb1e2e7718e0da2c63c8dbcbd108b4f5d45641fe427ac4bd1e57dd15cde7283d9a6314f5733408a
SSDEEP

3072:459wQzhixE1LVh1Cfy39PbXmHi2vovuOP+DFRLMIRMZcLYt0P5JRIGGV+:He5ImRbXmq5P+BRLMgMZRS5v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c2babf4fb070ed16ec312af1a735a3f_JaffaCakes118

Files

8c2babf4fb070ed16ec312af1a735a3f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

45e67182e0730fc80247ca81dca8584e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlZeroMemory

kernel32

GetProcAddress

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 150B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 527B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 438B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ