a35d93212d60c11896a1da8783e9af05_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a35d93212d60c11896a1da8783e9af05_JaffaCakes118
Size

112KB
MD5

a35d93212d60c11896a1da8783e9af05
SHA1

3f860d0622e62062f1d98f63ad03eb432fdb4035
SHA256

121746e09347d5a03de3db7a59aa5b7dabedfe5ae5847ed0674dd7baeef53ada
SHA512

eb88d098c8d9dd1b4f036db85f0a2e97068b9a0a63d5fcfad0746d012831bb6ea0d2a5174fca555c5c8fdbf863fb16e490de8bb9cf40ee96cdc296cf9537d225
SSDEEP

3072:pGieNVf+selCWy0GSyXgJH3KKHoXKLQe:IieWsuCWoydHo6LQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a35d93212d60c11896a1da8783e9af05_JaffaCakes118

Files

a35d93212d60c11896a1da8783e9af05_JaffaCakes118
.exe windows:5 windows x86 arch:x86

44626fae7155013f6e56a8d09752d250

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
GetStartupInfoA

Sections

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ