8d5c1669f44ea7540a73d62998a72c61_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d5c1669f44ea7540a73d62998a72c61_JaffaCakes118
Size

97KB
MD5

8d5c1669f44ea7540a73d62998a72c61
SHA1

7cd6e0ddb0f92f9cc615cc391f4c7e728f96555d
SHA256

e17ea9a73341f5089c582e16aac1ae03f612b5446cee6553c72277c27a25f14a
SHA512

50300560c80915ad28e081cdaa4bd8061050591ad7a1415d72379d2d9f7d61a06466ac9138f01f433bf719c93845126847413a211be440e04e3597c817c79c07
SSDEEP

3072:jXSdvUn9xX1tVBeDEQhuAOe58hDwcZt/Ion7r:jWoxX1tuDEQ5OThDwA97r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d5c1669f44ea7540a73d62998a72c61_JaffaCakes118

Files

8d5c1669f44ea7540a73d62998a72c61_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 95KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE