89718a3fe674f9263614c69a3ce2b57f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89718a3fe674f9263614c69a3ce2b57f_JaffaCakes118
Size

152KB
MD5

89718a3fe674f9263614c69a3ce2b57f
SHA1

7f2f39fcc3927423f8490dacba37157b386d516d
SHA256

9e20c34d7e97e20f8c65c58c19965d759b1f366e42fb90e94ad9dd8dc0bbc1b3
SHA512

41c9217c91572edd4c297b7dc69f0ab80cb585985e9ef56ab8abdada64e03ddbef3c4f15d22e4685746d1fb535ddefe1e47141a837528dbd7cd347b7824dcb65
SSDEEP

3072:1EQetZuUKYXouKHf7+AwNjwxh+XBYzqtrAHlIrpqd/rqzGw2zhl/Zy:mvueoz+1cxh8qzWqIrpqx+zp4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89718a3fe674f9263614c69a3ce2b57f_JaffaCakes118

Files

89718a3fe674f9263614c69a3ce2b57f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b7126388357badaa2b31692048c8ce57

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
LoadLibraryW
GetLastError
GetProcAddress

Sections

.text
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ