a5b6b87747ccd29df2f1f98ca818d712_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5b6b87747ccd29df2f1f98ca818d712_JaffaCakes118
Size

624KB
MD5

a5b6b87747ccd29df2f1f98ca818d712
SHA1

1ab965f45d8151165493f986534e06d85dc9408f
SHA256

1b60276d65589b4de267a0e18cb39ea84a672e28417f31f114dc97895259e975
SHA512

2431328b5c4f6f297ba1144cbcc2bb3934f9909adf3b6beec7c28c20a8d8a9d406570691b3ee3a85299ec3b24db02b64e0fc5c31dc47b53d08c6ac886adc6fbc
SSDEEP

12288:3GLrIZsXaXEk2+PHptW1wJwykfqA61n45Bpshv/Pv+6sd5rtI5QqLVH:WLrdKXX2x1RlqAK4TpshXX+zdBRqLVH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5b6b87747ccd29df2f1f98ca818d712_JaffaCakes118

Files

a5b6b87747ccd29df2f1f98ca818d712_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.nos
Size: - Virtual size: 244KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ