b50574e4bb83bbfee62e38c0ffda4155_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b50574e4bb83bbfee62e38c0ffda4155_JaffaCakes118
Size

421KB
MD5

b50574e4bb83bbfee62e38c0ffda4155
SHA1

a1dd77fa946ede7f754d51fc87a61cb08353dfc2
SHA256

fed222301149d07f72e4290c41f47576c6e0fa907cb594a90e9c497c0d915630
SHA512

1c860b0983ba16a98ca85e8abfda0594af810369101562b3dee84ab26968c309ed71d8f5019243c357e6b97eec5499a12a9dd1d3d8e5f8ec17c2d35c7e330226
SSDEEP

12288:KRONXmmzgIaHTtbQjMEn3MpPIJT4gr23L:lNXDgIaHTDPxgu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b50574e4bb83bbfee62e38c0ffda4155_JaffaCakes118

Files

b50574e4bb83bbfee62e38c0ffda4155_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5265396cce55c7fc139786d860943929

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SwitchToThread
GetProcAddress
ExitProcess
TerminateProcess
GetModuleHandleW

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ