dad05db8c09bb8cac6ab55adf521660b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dad05db8c09bb8cac6ab55adf521660b_JaffaCakes118
Size

209KB
MD5

dad05db8c09bb8cac6ab55adf521660b
SHA1

b2020bf8bab58696739c8c20d7296b992700013c
SHA256

c443e8c7b70de73e877820a950f4af3d1fee3ab401a9451ba831e874d57c72b9
SHA512

294b2f7c8297e9270a0864a4ca677a3ce0f9c1cdc73edea831e2e94b748282407c52b78c49d449043c51e9b710f787c8410e214fd157ed47862cf2c4a32bdb84
SSDEEP

6144:kGmNsYJSCA0U4q+HbdfzhMYn5GrYfvGln:MsYJSH+hOrSve

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dad05db8c09bb8cac6ab55adf521660b_JaffaCakes118

Files

dad05db8c09bb8cac6ab55adf521660b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4d8e9e06f8e51550e3e5089179e9846d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA

Sections

.text
Size: 7KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 7.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ccg
Size: 88KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE