db6bb1bb092de1c81c5688faa4d07e79_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db6bb1bb092de1c81c5688faa4d07e79_JaffaCakes118
Size

147KB
MD5

db6bb1bb092de1c81c5688faa4d07e79
SHA1

105dff9365eb8b236338c54ea180fbcffc078b0c
SHA256

964143c9b8636b201d5ca91e398fdf7178110a6ad8e7596acf52ca11e9802575
SHA512

c25524d4f814f5e37853e98124be2a003e83da3a742151be4c5f7b24418ccb48275014a26921f3e75a56228d5394de5b4b6cee442be385162c341c1fb0551c03
SSDEEP

3072:9YiKU5HT7B6mfkeEWEMPGCDP2PeayXPcCUlV+4ExBV4HFrKnDi5:NRsuyeayXPzkVLii5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db6bb1bb092de1c81c5688faa4d07e79_JaffaCakes118

Files

db6bb1bb092de1c81c5688faa4d07e79_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE