b0539b1fb4e374f8e7fc07ea004de43c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0539b1fb4e374f8e7fc07ea004de43c_JaffaCakes118
Size

1.4MB
MD5

b0539b1fb4e374f8e7fc07ea004de43c
SHA1

2dc5411770efd99df3f7d057aa363c3aedf7d75d
SHA256

1461836246e37c68c3784b4b2b50cee9e73cf611884628245a620f722653cb10
SHA512

282117a600e6867b7dfac3f631b55238301a0e1b428d882dc6636e582424fb5c9e990bc624519f7d45566471b44d6415e1d331675a6e3de1a1b4d127756bc91d
SSDEEP

24576:t9czsHHXJWTYBUVN7or5K/GOmB8oC+yNOWvDGJQuhLFqMcw2XqrfjV+:t9osnZW9Vy5KREFC+yNOeQF/1jV+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0539b1fb4e374f8e7fc07ea004de43c_JaffaCakes118

Files

b0539b1fb4e374f8e7fc07ea004de43c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

79b3362178937bf9559741c46bb9e035

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: - Virtual size: 19KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 156KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.f
Size: 77KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ