a091670543bb90ab912020f0e6827b7a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a091670543bb90ab912020f0e6827b7a_JaffaCakes118
Size

69KB
MD5

a091670543bb90ab912020f0e6827b7a
SHA1

0dd631e3f2f622e9a9ebec52f4d5880b6643421a
SHA256

3a18e74120d2cdccf4d390cdcde85d99ccef065c3f7726758f87f76b080071cb
SHA512

fc48e047a7ac92776d67820e59e076cbc95e52b0c32a3b99c3f425b991323a7050b0c5d055fe7873e3bbf66f95f7ce687c3b8019ec9fe77087cab4676a508477
SSDEEP

1536:fn9Ak7aO7RyI3fZFbOzU9I115Inm+ffsgwcs31AHI4Ya0:f9u8RyI3mUIxR+f0/cs3Nrn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a091670543bb90ab912020f0e6827b7a_JaffaCakes118

Files

a091670543bb90ab912020f0e6827b7a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

318b5fb58e4c9652f46f14cfd1728323

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
VirtualProtect
IsValidLocale
LoadLibraryA
GetProcAddress

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ