d2b8eac3e8ff8c2e15629457b1968977_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2b8eac3e8ff8c2e15629457b1968977_JaffaCakes118
Size

188KB
MD5

d2b8eac3e8ff8c2e15629457b1968977
SHA1

30f362ba97fe800567b9eb7724cf5bdd4468a8bb
SHA256

8ca768680760da8211ff1041b968b25cff0dc926abc069b1826c1e9799e14d40
SHA512

229cef10d6931c5865088eb9b236f81cb59931d19472956a4543fe235646a0b4d8f3cb965b0acaa4679617ce51e7abb213fa312d8c88d6b9918445a683db03d7
SSDEEP

3072:F9y3QFehB6odNjCy3iR745izH46SivlQLB7vOEW:FI364j73iF4ERS88h9W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2b8eac3e8ff8c2e15629457b1968977_JaffaCakes118

Files

d2b8eac3e8ff8c2e15629457b1968977_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4d8e9e06f8e51550e3e5089179e9846d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ccg
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE