d6cddf1f6768beb1bec6f59895eb1af4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6cddf1f6768beb1bec6f59895eb1af4_JaffaCakes118
Size

429KB
MD5

d6cddf1f6768beb1bec6f59895eb1af4
SHA1

bdf76c8d1b72cdc8f1624dc5cdb0209201021f61
SHA256

2d06084feb5a21ebf2de56cbb406bff7583383b491a0ed57793451ff106180f1
SHA512

fc87f2e80627486ef5706284b9c4e314ce6a1e7a60e6cfb5e0d67f880f382b2014c9e0ad43ae29e39a95802bd358c22209824e250efc529b63177b541968e983
SSDEEP

12288:Qfw+6zOk3M+remvo51FpLLzUN8W/L1a4uzThTIE:UKvBBz1xIF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6cddf1f6768beb1bec6f59895eb1af4_JaffaCakes118

Files

d6cddf1f6768beb1bec6f59895eb1af4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 426KB - Virtual size: 428KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_MEM_READ