8b3f56b0b3ae9375d3210f14a17fc3e1_JaffaCakes118 | Triage

Sharing

General

Target

8b3f56b0b3ae9375d3210f14a17fc3e1_JaffaCakes118
Size

282KB
MD5

8b3f56b0b3ae9375d3210f14a17fc3e1
SHA1

9cefe5fc34a59f87902747558ae05a6a622af9d0
SHA256

f7211ea1c8c787e7e559e58ea66ad7bf8c195550eb865a5af9c722c2e2278b2c
SHA512

f57204540d996765195234d9c55e9637667a2135814d9f613e4ddecd45413cb25e7a8432f85fd47ea2457ef1265da13173d33524773f29631d392b92dd374828
SSDEEP

6144:A7puZh8IRRUbGIdeIN5pYcgdGGmVSON5ggEU+ny6:Mpi77UbGnIN5pYlkbZ0gi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b3f56b0b3ae9375d3210f14a17fc3e1_JaffaCakes118

Files

8b3f56b0b3ae9375d3210f14a17fc3e1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 276KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ