c90f8c8f238a83944e7f76cc3b79abc5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c90f8c8f238a83944e7f76cc3b79abc5_JaffaCakes118
Size

246KB
MD5

c90f8c8f238a83944e7f76cc3b79abc5
SHA1

f98723a00929022803e260317765a24f827143ca
SHA256

4db76ffbf94e6de182575e75e5ff13fd24450ac9844ced3ade42156edf29ffd2
SHA512

03313ec5bd444628d336f49a8c8c38dfcbe7a01c29bf23ed4bd194123459cfecea490c1d695db2f6fe6f84f338f39bfd44253938e188a44a83b94609d9da35ea
SSDEEP

6144:ixrEmcTGAdTulF59LooSF/0VqsInWYINgpUgdFY:HsFF59L1SF/WqjxpU9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c90f8c8f238a83944e7f76cc3b79abc5_JaffaCakes118

Files

c90f8c8f238a83944e7f76cc3b79abc5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7a7803027531302026dedc7b5f6025f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress

Sections

.text
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 105KB - Virtual size: 980KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE