a7d510ce251197fd2a307828f6fbd797_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a7d510ce251197fd2a307828f6fbd797_JaffaCakes118
Size

36KB
MD5

a7d510ce251197fd2a307828f6fbd797
SHA1

509def7beee6d95e48c79ae85b0fffb6855c8756
SHA256

b6ab1dc70420df97de7ae81a660edb27c50d5b62f91a4d5764d6436ddf125034
SHA512

69b25ae060db55d049365f49ba67a9234344c5d45fa953ea11e4e23fb1ff8d6bf4f0ebe74c78316e16eeba61db5ca22bbde271a1dc0b40da2ac3c2927fb29690
SSDEEP

384:QlJ0MGyWcZJAAaQ/rSpcEu78dk6E7WohUynZxgWL//c/gNZZqBfoGdby6vL:Qx35ZrrxiTjAE/3oGdz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7d510ce251197fd2a307828f6fbd797_JaffaCakes118

Files

a7d510ce251197fd2a307828f6fbd797_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ef57496e354ffbd5e825683e6ebaa9ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileW
ExitProcess
GetLastError
GetProcAddress
GetSystemDefaultLCID
GetVersion
GlobalAlloc
GlobalFree
LoadLibraryExA
VirtualAlloc
VirtualFree
lstrlenA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE