a28060b2a8eebcb3a1b897916d1cf759_JaffaCakes118 | Triage

Sharing

General

Target

a28060b2a8eebcb3a1b897916d1cf759_JaffaCakes118
Size

600KB
MD5

a28060b2a8eebcb3a1b897916d1cf759
SHA1

2b6c9104288d7a177adb6e7eb7d8b462b395a9e8
SHA256

c446737805885e1a47fba23823d307510f278db9c42837ae6edfb72cbef5ce60
SHA512

91d2361a80c3c293c0d0c4c9027d8f9b7deb7cccdbd4b1d599ba38212029a2bbd3bc0781ea8ca96ba7c80b509086c4c2c50f1c41b48e6aa2ac1f25cf2d83b0f8
SSDEEP

12288:3GLrIZsXaXEk2+PHptW1wJwykfqA61n45Bpshv/Pv+6sd5rtI5QqLJ:WLrdKXX2x1RlqAK4TpshXX+zdBRqLJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a28060b2a8eebcb3a1b897916d1cf759_JaffaCakes118

Files

a28060b2a8eebcb3a1b897916d1cf759_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.nos
Size: - Virtual size: 244KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ