d6a7a8a9bd8c30ee662ab03f1373668d_JaffaCakes118 | Triage

Sharing

General

Target

d6a7a8a9bd8c30ee662ab03f1373668d_JaffaCakes118
Size

216KB
MD5

d6a7a8a9bd8c30ee662ab03f1373668d
SHA1

bdaf3ad0e9b36ae827103cd3a8d2b70f82a3376b
SHA256

0d3f9e09886a3ca7b997b8ea1f0efc9af964c1e8bd318b7d9179c5cf47641cd1
SHA512

0899db8a2d4dd8d874951cb39a1d71ee7aa0627dd990d24dfc8e6e353564e163ea7cb67f6adabe18c5112576b58c45cd151037cfdf68f43fecab42fccd117621
SSDEEP

6144:Ol+m04BCTs0ZVKuVDClqJXScnVlGJtThHsc:OAl4mskKGqqBpzGrThM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6a7a8a9bd8c30ee662ab03f1373668d_JaffaCakes118

Files

d6a7a8a9bd8c30ee662ab03f1373668d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5a498eee87e4d89512a84502f500181f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA

Sections

CODE
Size: 162KB - Virtual size: 368KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.packet
Size: 19KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE