d247f0c098fb195ad081a63f60835b23_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d247f0c098fb195ad081a63f60835b23_JaffaCakes118
Size

144KB
MD5

d247f0c098fb195ad081a63f60835b23
SHA1

f415a7d0d21c983e52bf237513c8a370cc3aa984
SHA256

d00473917e74a15ba6f6ca1f478dcb56b9ca896304c920cc6f93eb2f250fe9ba
SHA512

fcfe375e7120d72ef2803a52a7229db17023428ef77b738e903e7d55e6644a4b9ee057ccec7db63c661716b2e6aa517a0497d567ebee58f37ff3038b1d1b14bf
SSDEEP

3072:YpMNuVxCzvxC0CMMl51Kg8J7RhRP6JXXAjDlfHF:TixCgtM+1KFxRhRWXwjh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d247f0c098fb195ad081a63f60835b23_JaffaCakes118

Files

d247f0c098fb195ad081a63f60835b23_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2f3c5da38e687ed8e68cd2b55dbd54f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Np
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE