da566cb61792332a102294903f3a74c1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da566cb61792332a102294903f3a74c1_JaffaCakes118
Size

542KB
MD5

da566cb61792332a102294903f3a74c1
SHA1

3722a0f72fc5a41a01bac8ce8203151e83341696
SHA256

3b30dde1aa83151ab9b228f684fe30533e83a8e994ef4f7e6b3e0d2f9f13609f
SHA512

6a2f9e5d8ec899f687907d1c4ec83a772f8b6f48c19a7101cf48038852ee4165343f12c91c15548cdce5ef4c0208b5d56b7b373fb56fe0bb15be673280586612
SSDEEP

6144:8CuRPFYCHA2bXGMZIDv96uwxz75+/gY0XIZcq:8BRdYCg2bKKz7zzIKq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da566cb61792332a102294903f3a74c1_JaffaCakes118

Files

da566cb61792332a102294903f3a74c1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

79b3362178937bf9559741c46bb9e035

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.MPRESS1
Size: 11KB - Virtual size: 564KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 529KB - Virtual size: 529KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE