96b35193811306e4ea40d8c630719199_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96b35193811306e4ea40d8c630719199_JaffaCakes118
Size

46KB
MD5

96b35193811306e4ea40d8c630719199
SHA1

e0c645465c115e3ed368ea0e7d2e32f537e131e1
SHA256

ad53506a1c6dc74282b82ddae07c09fbc822ea10fd6b4e56f11650cb5964c5b8
SHA512

04da79e59e23700ca5862a80eb5c85c3d49bdf93a360ee97c17ebdae5205e8f4161ef09c2bbac0a03bf6c3b56c51b8437fd95b66d6f50fe6afef4cdd62741050
SSDEEP

768:MNE9bf1FYTqPdqUrJs4PAG+yHMYVcnrr8Uqs7B+5Bng2WWqd:FIYhlskJTMYsio6m2Wrd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96b35193811306e4ea40d8c630719199_JaffaCakes118

Files

96b35193811306e4ea40d8c630719199_JaffaCakes118
.exe windows:4 windows x86 arch:x86

36e6bef5d6abfe9bfab42553db0ab02f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleA
VirtualAlloc

Sections

.text
Size: 512B - Virtual size: 262B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 256B - Virtual size: 21B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aaaa
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE