b2ac4379f7ac8c766eb6a62e3fd76a42_JaffaCakes118 | Triage

Sharing

General

Target

b2ac4379f7ac8c766eb6a62e3fd76a42_JaffaCakes118
Size

278KB
MD5

b2ac4379f7ac8c766eb6a62e3fd76a42
SHA1

7493ebe9459ba70bb1da967d746ad2cbb5e49a9b
SHA256

d548293720759cb9fa352f525a797ffea660efdb2cc4f3cac1fc133f92c6f673
SHA512

cced0b48ed7ee634f6cded201dc098562c19c0355772b026eb20df8b6859ac0277c18d79cdff326bcd721d0acc2c329187bf4ffe2817927797e89ccb9c71b923
SSDEEP

6144:70CAUwf/X5b7ysejSTNmA73OQ8HO4GlxaGOhna65pY+OR2S:dq/Jb7yTW5mA73L8uBlahnX3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2ac4379f7ac8c766eb6a62e3fd76a42_JaffaCakes118

Files

b2ac4379f7ac8c766eb6a62e3fd76a42_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 273KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ