c987451a75821b37a5fbf20be0a66aa5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c987451a75821b37a5fbf20be0a66aa5_JaffaCakes118
Size

88KB
MD5

c987451a75821b37a5fbf20be0a66aa5
SHA1

a181e22521bf2ac6e342383d90771ac4cf02f113
SHA256

db827485c7f7949423e142b2898dfed5ce2e42b2a5149b9e650bd57609f4408a
SHA512

9fb89d0a02ed0c1c7c69fbc0a78ec14d3c442a55027a9204ac73c6c193067fc45052f2b4ff1721be65da55c468510994b105ffa0a40557904a51f2896a5335e5
SSDEEP

1536:oldl/uvdD7hgXLqDQUVGu2ApbVqr8oorFPkmq:kMD7hgXJUVjG/sPr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c987451a75821b37a5fbf20be0a66aa5_JaffaCakes118

Files

c987451a75821b37a5fbf20be0a66aa5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE