bb6cb5c12c65d62cff39630469ae0659_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb6cb5c12c65d62cff39630469ae0659_JaffaCakes118
Size

23KB
MD5

bb6cb5c12c65d62cff39630469ae0659
SHA1

32ee1fd1bc1294458be8b2938a595e56f55d4cc4
SHA256

754762999a11469aa8a49b3b2d7baae517049a93e5724ef120c79d4b2975ccea
SHA512

688ca8958bf78c63e04dd572bdd3264c2d8d05796e69313c84cfe8eb5e4b44b6f7f9eba32e5b9a27097d7add9bd918bec8ff7490fc85af9d0f290afefd5a8da5
SSDEEP

384:yRGXPNkhqKKLFbLVdw2zYhiKhFHg31rqSh/iRQ91wwW68edh7sPLFh6fQGeBk:QhiN3RzYhZFA1rhBiq9xWjedhu2fQG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb6cb5c12c65d62cff39630469ae0659_JaffaCakes118

Files

bb6cb5c12c65d62cff39630469ae0659_JaffaCakes118
.exe windows:4 windows x86 arch:x86

59792705e0e5d0110d9423cf6eafeba7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WinExec
lstrlenA
lstrcatA
GetProcAddress
LoadLibraryA

msvcrt

_strdup
strlen

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 506B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ