89721c59efda04aefb917cbf8f285a76_JaffaCakes118 | Triage

Sharing

General

Target

89721c59efda04aefb917cbf8f285a76_JaffaCakes118
Size

201KB
MD5

89721c59efda04aefb917cbf8f285a76
SHA1

0fba4f1371492c82c1223162aa51d565e85c23df
SHA256

4a3d8d1eebf5fa6cc45527400d7bc7de436d4e90c04f7daa964dc61a8e5f296f
SHA512

71a2b8629878c34e8dcf9be30c0034ce764bf80c903c4b323fa03d490dbb6838e1f1f69d7b0150cee874d9ad58380f0e7ea7102782b2e33eb94661d6f9af05cc
SSDEEP

6144:6J/WcaI5RxEI+UPkE0oBaJDpZFd8iINDE:EqO7V+4kE0yahpZkJE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89721c59efda04aefb917cbf8f285a76_JaffaCakes118

Files

89721c59efda04aefb917cbf8f285a76_JaffaCakes118
.exe windows:4 windows x86 arch:x86

29bd810f448a640871ce275f73c6c03a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
SetLastError
LoadLibraryA

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ