af00d69e1b11b0d5227f75579f9a8e39_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af00d69e1b11b0d5227f75579f9a8e39_JaffaCakes118
Size

31KB
MD5

af00d69e1b11b0d5227f75579f9a8e39
SHA1

8a7bbafe03799cd92b90b821787b61dd59bf87dd
SHA256

d455b02bd70e31532e6a145af1fa032988a36edfeae498867177bb951b9b23b0
SHA512

8f646cabc2cbf97e589a0e93ed1070ea65f09c86db64be85324260a58fdf35d2a22181d390578aeabdc006a61072130985b7bdf28e709d144dfcbf69f114fefd
SSDEEP

768:lYByPTYY5BNAF020LeeqtT4BDdwvuYF0F:4AvBc02V8bwvuY6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af00d69e1b11b0d5227f75579f9a8e39_JaffaCakes118

Files

af00d69e1b11b0d5227f75579f9a8e39_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5e4a2095a7178e595a027ee41b9647b3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
lstrlenA
GlobalAlloc

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE