a12fbf265f71639be870ba7163b64b19_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a12fbf265f71639be870ba7163b64b19_JaffaCakes118
Size

62KB
MD5

a12fbf265f71639be870ba7163b64b19
SHA1

76f97b65e68d7aaba916b7de2d8dfd95b7f522ec
SHA256

a367572cfb9fc3f7dcce7d749d20c6cebf226e3c36903a400b8a6c3f4ee9454c
SHA512

8a575d4f048ab0dfdff93a5bcdae9136f0882133d5c5243a1deedc563eda0e1b6aff580ff31789773f6507c30532257bb6f105b6a40f57c4408615892dbbd0c7
SSDEEP

768:PVtgqhkHiOoZXHw9rt92gvxFBQHZ84svoJQYkBQOQN9a/XvItz:PXgqhkHhiwT92gvxIHOPo6XQOQCPe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a12fbf265f71639be870ba7163b64b19_JaffaCakes118

Files

a12fbf265f71639be870ba7163b64b19_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ