aff643a5014a9d8e98b24fa4dac11623_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aff643a5014a9d8e98b24fa4dac11623_JaffaCakes118
Size

246KB
MD5

aff643a5014a9d8e98b24fa4dac11623
SHA1

926fc2049984da1a4170dc58bdadaced9e50fa88
SHA256

ec9b2bf6a6fdb2aa5b699ea897925e2e3b152aecc6db28c47992607871a50c28
SHA512

7d8be9ca8074d4940a20ffb8095d5d5116dfc35dd3ad326d35ad0dab95b6615d8ffdc04e0481f979805fb0663a671d178637ec99b9616f5ceae0a39bdb28b751
SSDEEP

6144:vHcDOLkLpOQeuZBWH+3s3YSKCmC3G9lisOdvXP5Az1W:vgOLkVOQeuZB4Plh29eP5A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aff643a5014a9d8e98b24fa4dac11623_JaffaCakes118

Files

aff643a5014a9d8e98b24fa4dac11623_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7a7803027531302026dedc7b5f6025f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress

Sections

.text
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 105KB - Virtual size: 980KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE