d1fd61ceaf0a6574e05d2c3d8a11c757_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1fd61ceaf0a6574e05d2c3d8a11c757_JaffaCakes118
Size

87KB
MD5

d1fd61ceaf0a6574e05d2c3d8a11c757
SHA1

e2735902632b80a147bd08f843784d671ceb6450
SHA256

42b3b2606db99299f021650372b5650319510460ba5f7f39a0e242199d44488a
SHA512

6cba4461b11c90d2ff45124f7f5837994ab2ed6842eecbdd4ff09dfea467ae67b7dbdba75a6b1bf6925fa7bfeb65dc2fd9e90dae147a13b3c4c631aaf683ce30
SSDEEP

1536:GEei+HjvdKVn0yZbMiOFzGi0Gee+VBVM6QXbA4ps4WZTkydpL2Gcy6MEm0FL2:GDi+HjvdKVXZYiOhG5GefRM7bAnTZTk9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1fd61ceaf0a6574e05d2c3d8a11c757_JaffaCakes118

Files

d1fd61ceaf0a6574e05d2c3d8a11c757_JaffaCakes118
.exe windows:4 windows x86 arch:x86

802b5c9f6935c6a08dd58f9f93a0e8e9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleW
GetLastError

Exports

Exports

plr
tqg
wsx

Sections

.code
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 303B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mdata
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ