dc8c0ccdb15c8bf5aee08de3a99b7deb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc8c0ccdb15c8bf5aee08de3a99b7deb_JaffaCakes118
Size

598KB
MD5

dc8c0ccdb15c8bf5aee08de3a99b7deb
SHA1

63aac8a3f4f1d5c044f24acb4bf7832a7c39260f
SHA256

eca58d1a8edcb5b3e0796307a9395973359c415b43905c5b963dadadc5714cc6
SHA512

214a39e7f7223aaf0609b0d70b66a78e2a7089207814f24a5fcf6ba2278a73dfc5d966b629f7cf8193c6942491bbd92253342f7173daf4b4354b350ea2528ca9
SSDEEP

12288:3GLrIZsXaXEk2+PHptW1wJwykfqA61n45Bpshv/Pv+6sd5rtI5QqLA:WLrdKXX2x1RlqAK4TpshXX+zdBRqLA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc8c0ccdb15c8bf5aee08de3a99b7deb_JaffaCakes118

Files

dc8c0ccdb15c8bf5aee08de3a99b7deb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.nos
Size: - Virtual size: 244KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ