8d06e57c597d8855e3b00dbdffc08686_JaffaCakes118 | Triage

Sharing

General

Target

8d06e57c597d8855e3b00dbdffc08686_JaffaCakes118
Size

132KB
MD5

8d06e57c597d8855e3b00dbdffc08686
SHA1

3d55b6fa9fc4b6e9af405c52946d214cf43824fc
SHA256

6d735fd1681702bb3f124f41ec8bcd1f05f1066f3e1b3a3b2e4da56d15f64011
SHA512

f4f0595ab3e287dbfc3c6e28f1bc2c36d78416cf91d1e54401fdcb01effb2db198693e847db2c47bd7a097429e08d169e2e8af852dd0e850e6af2a71a2aca6a4
SSDEEP

3072:UfZTwUa7e73kEtW8lJjWHdtm7Gbc4ExBV4HK:uZTwUa7Mk+46Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d06e57c597d8855e3b00dbdffc08686_JaffaCakes118

Files

8d06e57c597d8855e3b00dbdffc08686_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE