aabc6bb2cfa58869082baa0916ee456a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aabc6bb2cfa58869082baa0916ee456a_JaffaCakes118
Size

997KB
MD5

aabc6bb2cfa58869082baa0916ee456a
SHA1

363edc1d7504d7a3205fd2825eedfb3c3fccadff
SHA256

f06c8c435629ab0e495ced4d79858e27dae58e0470c0f3eb3d0cf9adefbbe120
SHA512

c9c5fbf07f7bafe0f56f4cc8f52e09b9f4fb922e7ccddf9b4422791b0c9458dc02d2e0d4f5679101b9d326fe4b57630f8eecf1f0e125a5ec76d2724469348890
SSDEEP

24576:0qIk9GcEz89BZQ2tWntXR/wd+XLlQLvtwbI:PIMGjI9BZOtm6LlMm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aabc6bb2cfa58869082baa0916ee456a_JaffaCakes118

Files

aabc6bb2cfa58869082baa0916ee456a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 991KB - Virtual size: 992KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ