a60ea67adebfeff52159c51008a6d54f_JaffaCakes118 | Triage

Sharing

General

Target

a60ea67adebfeff52159c51008a6d54f_JaffaCakes118
Size

160KB
MD5

a60ea67adebfeff52159c51008a6d54f
SHA1

385cc1bc138a1e475ad37f4ca1f43cd2543e2ac9
SHA256

6f02e3eb50b2067d710f4744f0556228c0115e6fbd8911bde50e452571750562
SHA512

5cf96a296dfaabe6c645c788c26a6fcd985ef48c4122c97e85ef354842055bfbf3d7aa4043e38bad8413ecb89c11f4e2b8df99a4d408e67d985041b79703ce37
SSDEEP

3072:Kyvva/saFDOvcsreI1MysO3fkwqbJKIcQoBHLAc/aH5Kp9v:KyHA1DOEsreISO95/ug

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a60ea67adebfeff52159c51008a6d54f_JaffaCakes118

Files

a60ea67adebfeff52159c51008a6d54f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

79b3362178937bf9559741c46bb9e035

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE