8d088a359bb8f3ab94c56649adceebf8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d088a359bb8f3ab94c56649adceebf8_JaffaCakes118
Size

99KB
MD5

8d088a359bb8f3ab94c56649adceebf8
SHA1

1d5a07a5cb442e55c759709a1c71ea3f8a56e752
SHA256

697afc080438058a30928944b245fbb21ae51816620bb21629ff3d492a618668
SHA512

b45ffc0fe26d62f0a2ab2c27c7469987f525e94ca5a4f175ae78dde8377b7f75d3d66e9d89018d991f46c8690fca1c1e51535c5026bf3995215282f9b2fdfdca
SSDEEP

1536:K9O934Xvhkxu+SVhbYbHT5nlWM4333k1UxzlPU+24v5:Ki4Zko1VhbYHThb0nCazlPU+dv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d088a359bb8f3ab94c56649adceebf8_JaffaCakes118

Files

8d088a359bb8f3ab94c56649adceebf8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ