b73eff3a390e3903e77a916df13bc81f_JaffaCakes118 | Triage

Sharing

General

Target

b73eff3a390e3903e77a916df13bc81f_JaffaCakes118
Size

244KB
MD5

b73eff3a390e3903e77a916df13bc81f
SHA1

592fbb800c77bf905be384ac1fc9172959663a5e
SHA256

47bf6b7035748585f01e8d2f261d9c281ec4d870f1d52c31b6d5c0619c2e9e43
SHA512

e05706ef161b52ad5a68902daf58f91c7135fe50632c205a678d06a52b50d7eab20c427b2421cc1b14d5bfa89a3792f42d6eb4a1aa1824516ae2d48bf980af76
SSDEEP

6144:kxMfWSXEbb+PYomZlrNUugIJsxSjx4ocK03splHGitUro:kDP+gomZlrNwDxB/cfver

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b73eff3a390e3903e77a916df13bc81f_JaffaCakes118

Files

b73eff3a390e3903e77a916df13bc81f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

79b3362178937bf9559741c46bb9e035

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 730B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE