dab77355547fc15aa791f33aa5ef06ca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dab77355547fc15aa791f33aa5ef06ca_JaffaCakes118
Size

263KB
MD5

dab77355547fc15aa791f33aa5ef06ca
SHA1

e9798a9d050eecde6b8442ac1c9fadf23f896ef1
SHA256

538355b4684800139c94a13514202b709169e925a2263a714b21bce716af884e
SHA512

d6f914b61892c900052eb909b46c4f5cbd49f37da449d8519f25c32e3d05e8195d5d116abbbc4b83b6f2145fae9c23c2dd4a65efb22479bf113b1a9540b5772d
SSDEEP

3072:2to7T70bD6zb1rCf/Vr5RPMX6QFnugGnvwlWdFCNxb/qi5eSLlgOdXm3+Tkh80JL:z0bMGXRPMXxHsct5zl17To807w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dab77355547fc15aa791f33aa5ef06ca_JaffaCakes118

Files

dab77355547fc15aa791f33aa5ef06ca_JaffaCakes118
.exe windows:5 windows x86 arch:x86

79b3362178937bf9559741c46bb9e035

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 730B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 259KB - Virtual size: 258KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE