b67ddf2bfc626379e848500bd43c5ba1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b67ddf2bfc626379e848500bd43c5ba1_JaffaCakes118
Size

99KB
MD5

b67ddf2bfc626379e848500bd43c5ba1
SHA1

3c07c6dff2b65b41f67d84c765052b055731d293
SHA256

0f0958732d126b4fe1aaa421c01a40a3158aba408bfdc7e9df3488326983a3b5
SHA512

534cb032861f0a84263354b29ddd09714f4efff9a34fb1821bc616b25b2bd8831a5d903e36df2017780aba0f283d357c8dffeaf4795286ffcbc6a658d50287a1
SSDEEP

1536:fZysKg2jG2hjvgtJy2B/a90UNFLTK87h2OYI9+0HrrvJ4VHxFH:fZy3gX2hkgFLTKAhn3PRWn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b67ddf2bfc626379e848500bd43c5ba1_JaffaCakes118

Files

b67ddf2bfc626379e848500bd43c5ba1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

95dd8565ca0bfb2d2d6ae9b23740c4e0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA

Sections

.scpack
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE