a1de1605eb8e85f72251eed36abe53d2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1de1605eb8e85f72251eed36abe53d2_JaffaCakes118
Size

184KB
MD5

a1de1605eb8e85f72251eed36abe53d2
SHA1

69c1d2f9e43c799d47e32679a6258b1e56116211
SHA256

c900d86a6420c5717445e43bed49aa0b117dcf0759141ac4abe2f9da654767dc
SHA512

d26dd37d8d007ba142177180e9916c163af41209a14a18e67986a8d01c3bb155a6a62c76786eecbf819da50d2972a30cfb003e9f9100dc6a4efa160d735559eb
SSDEEP

1536:kekhIm6SI63cicmJApTF4xNocD5RpAcQyGQutRUchvNIYe9fr4cDmmYm:q6W373gAQ31t+ch6YelUcqmYm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1de1605eb8e85f72251eed36abe53d2_JaffaCakes118

Files

a1de1605eb8e85f72251eed36abe53d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a56f115ee5ef2625bd949acaeec66b76

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

Sections

.text
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE