b0ee5953fff324243c90b54acbff1340_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0ee5953fff324243c90b54acbff1340_JaffaCakes118
Size

27KB
MD5

b0ee5953fff324243c90b54acbff1340
SHA1

cc7fde8b9addbba8b82c6e7c5e2c792f98049c24
SHA256

926657914f8bd8ae39f9da65e043ac3ac5c5dc6d2285809d3d43a2393f0e9e6f
SHA512

a2c9ea6e6277cdfbf163f5ee203b59b53bbecf5aae2fd6d3ce2008047bee36302eb623ed288866ae993a877a1c48175a179f093842833d5e453d2091bbf7a445
SSDEEP

768:Ph8uQMwuz+u2SGKXKLVSrtl8lLemGfCEP:PQMtiSL424lemGfCq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0ee5953fff324243c90b54acbff1340_JaffaCakes118

Files

b0ee5953fff324243c90b54acbff1340_JaffaCakes118
.exe windows:4 windows x86 arch:x86

79b3362178937bf9559741c46bb9e035

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 982B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 304B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 23KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ