958223a09eacd750b614a1fe9eeb1b48_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

958223a09eacd750b614a1fe9eeb1b48_JaffaCakes118
Size

115KB
MD5

958223a09eacd750b614a1fe9eeb1b48
SHA1

7abd07dbe72697ddd99935f9f7bb1af51f844e5e
SHA256

5111ea7fad0880156393439dec7279522ace0c914dc5a0fe8c6dd3d3ea751afd
SHA512

3d704a36ee23619f87403506c388f5ff3484668af848023f8cb776f7d97a1fe4bb90a67ab34d09fda2ff90ce068f250129fb8929556f17021b484c6c7479d1e2
SSDEEP

1536:AAuUWPfZ4tuPnwvG0vbJlj64BuOv1jZ19huIS50lbzu8fT6Jk1XzrkF+:AAJWPmonKGADSO1LuIoYzH6JUoF+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
958223a09eacd750b614a1fe9eeb1b48_JaffaCakes118

Files

958223a09eacd750b614a1fe9eeb1b48_JaffaCakes118
.exe windows:4 windows x86 arch:x86

95dd8565ca0bfb2d2d6ae9b23740c4e0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA

Sections

BitArts
Size: - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BitArts
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BitArts
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BitArts
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE