a0477cbf234a7ac9e89f80050a2752ca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0477cbf234a7ac9e89f80050a2752ca_JaffaCakes118
Size

124KB
MD5

a0477cbf234a7ac9e89f80050a2752ca
SHA1

78bd2d21e92e7a6408234c7c28c71d927cf0e489
SHA256

dbb7a281f8c472931e5df1bd32e4b82daaee09f361042c65641498a0b781cacb
SHA512

eb11954a468d622371b53263ce58a3eeef72298604519335b18f5cf439fe52fbdc856c995906ef8d8bfe33f80af6f659f4b454fe609ecd62c7c0c3b1a085124e
SSDEEP

3072:SPYyEBPdEzK6A9cwjZI4v+uyfxjKPqSlL2Hz41Z1jddWZhX0ga2VRGxT:yEBMfA/jLOxju5l6z4LhdEf0gNRq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0477cbf234a7ac9e89f80050a2752ca_JaffaCakes118

Files

a0477cbf234a7ac9e89f80050a2752ca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rawdat
Size: 114KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE