b5dbb83e15fbc6a96f627a6d1e1830c7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5dbb83e15fbc6a96f627a6d1e1830c7_JaffaCakes118
Size

6KB
MD5

b5dbb83e15fbc6a96f627a6d1e1830c7
SHA1

8ef67c96df636ab34c50272728103b07f92cdab6
SHA256

7125a2b06fbd3b5148fd8ee18dfe9708dd024695a29fcbb1af162be3e584b111
SHA512

31fbe98a9da96038e38db9a5138c7979edc5bc51303e03e1829a35e6f42cd7270dede0f17f759abd009d94a882a6e7949104a690deb1caff9e9ace4a323bd1f8
SSDEEP

24:7GS2TRKhXItC/SNcIR0i7Nk/0uiNqxWnaprfWnp:rURKqtC6Ni4tuiEprO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5dbb83e15fbc6a96f627a6d1e1830c7_JaffaCakes118

Files

b5dbb83e15fbc6a96f627a6d1e1830c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE