d23a78b00bf1f6911e9ac3fce5e1536e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d23a78b00bf1f6911e9ac3fce5e1536e_JaffaCakes118
Size

113KB
MD5

d23a78b00bf1f6911e9ac3fce5e1536e
SHA1

a6f7a1adc0e78ba1535e8f479b641b9b18b972fc
SHA256

9dc43321cadce3a2e2beeb6ca82d4ce9bfce10e67dc00a910ec216913ee6d9c7
SHA512

8daea6fad05b5c36f27037347f3b7a20990da6a5852553f5586743f865eaa953ae2c91e5fea3d1e1c4013380cc6beb024b0f9a5e594196fcbecb81baa8c85dce
SSDEEP

3072:1ek2hiV6QFt1OM2pTq8R9dXBoyroJPr89ai7BpiBL/1vw2oH:ohi3t1t2pTqw9tBl0rGZ7CBL/1Vo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d23a78b00bf1f6911e9ac3fce5e1536e_JaffaCakes118

Files

d23a78b00bf1f6911e9ac3fce5e1536e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b2ab9c868a88adb1bc668cb8d724d018

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
GetProcAddress
LoadLibraryA

Sections

.text
Size: - Virtual size: 416KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 42KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE