e159c0b53cbbc9b3cd8bbea130fcd5a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e159c0b53cbbc9b3cd8bbea130fcd5a2_JaffaCakes118
Size

53KB
MD5

e159c0b53cbbc9b3cd8bbea130fcd5a2
SHA1

aa366d707f773c30c6ec9cadeafe02d5ec50583b
SHA256

5bd76d81569c9b67a43ce9c95e706756a25ecf35bff6988005d3246d42347f56
SHA512

4753f02232e409d79e46812d91eec88b446e35ed98ba9858d454583decb21c36e029375dd6fb13b6948a657b33d88b438da2ec267a7da7144b1c7b60e59bdad3
SSDEEP

768:FzHS4tojQaIHZpCKe9tyaxP1V7olhupDYW+ApYwKXLK9+iUl:FzHbtuqHjCK0tyW7BYIYwQKIiUl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e159c0b53cbbc9b3cd8bbea130fcd5a2_JaffaCakes118

Files

e159c0b53cbbc9b3cd8bbea130fcd5a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

95dd8565ca0bfb2d2d6ae9b23740c4e0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA

Sections

.text
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE