b59422451551e527207190f810904030_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b59422451551e527207190f810904030_JaffaCakes118
Size

201KB
MD5

b59422451551e527207190f810904030
SHA1

1663c64facdcbb24ad42db6428390097fd710cc3
SHA256

3a649a65259b65ffc5253d9970a6df66c9e13bf34be62a1d6e62b1bc8dd47662
SHA512

d63fd2b66146d37536ceb6a692c81a618fa5857e85c26a1788aa64ed482decb85274f00d100b94334285d2b0eb56540f289f57d482e997e02f9e3c101a2066fc
SSDEEP

6144:6J/WcaI5cxEI+UPkE0oBaJDpZFd8iINDE:EqOeV+4kE0yahpZkJE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b59422451551e527207190f810904030_JaffaCakes118

Files

b59422451551e527207190f810904030_JaffaCakes118
.exe windows:4 windows x86 arch:x86

29bd810f448a640871ce275f73c6c03a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
SetLastError
LoadLibraryA

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ