df2373015a059f26f7334240a4b92713_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df2373015a059f26f7334240a4b92713_JaffaCakes118
Size

4.3MB
MD5

df2373015a059f26f7334240a4b92713
SHA1

9605433018effb309bc8755bc42457a0f4dfaf6b
SHA256

296274a1e8396a76302c2f3423cdfa78e48a423d8d7ff53ce8a7f802eae8f447
SHA512

9cfba35d659df010df0b9970664e5b118b379f2cf228f6357384e1a8d528b33a80ad7ea170a58435b351dca0bf87df8e60373216683bcd886b5d07f832a44386
SSDEEP

98304:F37pqZSkflm6bP1LRyco6HfCITcU6qjrkfDbL:V8LZT1s6HwhcrkfDbL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df2373015a059f26f7334240a4b92713_JaffaCakes118

Files

df2373015a059f26f7334240a4b92713_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b2ab9c868a88adb1bc668cb8d724d018

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
GetProcAddress
LoadLibraryA

Sections

.text
Size: - Virtual size: 11.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 165KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE