a88d67f7d74f32a0f4a0386cb19bb52e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a88d67f7d74f32a0f4a0386cb19bb52e_JaffaCakes118
Size

269KB
MD5

a88d67f7d74f32a0f4a0386cb19bb52e
SHA1

664f5b8352b326c8f27ddaf3971d42c68fb5accf
SHA256

6ef9adc6c4cb208176b0347a34c61aa55ecefbb28f4ee489d9b76b692640045d
SHA512

4ba371041b2ca9b7cf8c38bb0719f86103a487021ec9ffe26820b775d8af591009fa2c3071473ffa9b74d1e29ce203b6a57cb1680f930a807c2d5370c58d10fe
SSDEEP

6144:ldXzbyOouNT2OtJsBpjaeHUM2h0YIJumoPEA:XjOjuNT5OaeHn3O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a88d67f7d74f32a0f4a0386cb19bb52e_JaffaCakes118

Files

a88d67f7d74f32a0f4a0386cb19bb52e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

79b3362178937bf9559741c46bb9e035

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 730B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE