d228486d8c3b40af583076ebc2670079_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d228486d8c3b40af583076ebc2670079_JaffaCakes118
Size

32KB
MD5

d228486d8c3b40af583076ebc2670079
SHA1

28937d69ae128948f3ff164594e582d46b5d264a
SHA256

521f5fdf36015362907a605c1d60e1b35d70d100b34e2a14728ae5eff09dbacb
SHA512

a052ba8b6ed85c1f61d4f072cfc399631ea1c7633bb77c85485db81e3567ee4abe7431f5943059b7fae8e529564ade3a5d2d0c4e059abf6fdadd7acdbf927f31
SSDEEP

768:nQ8WMNXl4Jl2hxsepvs0ELVtDeXWUZhjCbPNk/RWKrScgsZZC:nbWMNXl6lEeiv0LimUZheb2pvosZZC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d228486d8c3b40af583076ebc2670079_JaffaCakes118

Files

d228486d8c3b40af583076ebc2670079_JaffaCakes118
.exe windows:4 windows x86 arch:x86

805d77ebf6e2842ae8cc8d2cbb1f6dc0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
GetLastError
FindClose

Sections

.text
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE