dbdb8b7a38ca0c24c9c1f30590d0dad1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dbdb8b7a38ca0c24c9c1f30590d0dad1_JaffaCakes118
Size

47KB
MD5

dbdb8b7a38ca0c24c9c1f30590d0dad1
SHA1

0873a21cbcfaf42570044919ad8075541022c646
SHA256

358e5949b5966746611213ef6d7ef774e6c0a8af04430de7bcff0b796f12305c
SHA512

70aae88e4f290f703d7a1978c6ce3a6df99695b2b6cb72c25d6def35dbd28eca69fda7757ec4bbb00b7c09980e8e02f590473f621a566b55b9c6de71d5aa7f2b
SSDEEP

768:SUSCK6eWa19gxvoo2p207sJePYO78LDgv9eT5QETpQXoEFtiC2FFGBMxfRWc2o8w:SBWa1uhoM07jpoLDgvoT5QEiXo6tiC2C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbdb8b7a38ca0c24c9c1f30590d0dad1_JaffaCakes118

Files

dbdb8b7a38ca0c24c9c1f30590d0dad1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_TEXT2
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE