d23d1e5ced3fb74da1e65f18dcacecb5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d23d1e5ced3fb74da1e65f18dcacecb5_JaffaCakes118
Size

47KB
MD5

d23d1e5ced3fb74da1e65f18dcacecb5
SHA1

4cc3f2833c1562ab7bf32e8202c4a7e6eccbb76e
SHA256

aebdadbb02b82ba94e9290827974d1cdbe9494fecfbd19696ae583d5324739d4
SHA512

b01100e9a3bdb14d5d7a4d62b7245c8c9a30541d97fa0d1b3781544d7bfa8c31414a280bd768b9343e65720ab146271ef538cde1f2b082ff24bdee7b93a9936a
SSDEEP

768:kJv8vvAl9Gx+Yio1WjSd0/WYUVCrBvYFeehVdduSqksN3mw3uA31Y7iL:kB8gl9MbWj6diAFPhrfswxARL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d23d1e5ced3fb74da1e65f18dcacecb5_JaffaCakes118

Files

d23d1e5ced3fb74da1e65f18dcacecb5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_TEXT2
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE