f5f255215daf51c9fd06e7f7acef824f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5f255215daf51c9fd06e7f7acef824f_JaffaCakes118
Size

196KB
MD5

f5f255215daf51c9fd06e7f7acef824f
SHA1

9346f1fe3c3076e0d045c65a00f753c4b89bbeda
SHA256

b3c14e8a896049e231ab8aaa75d24deee932664827411d1eeade253235aa6b48
SHA512

25336df0b71cf62ad3d31fb39f2e0b11ef7b78442505a5fd4907d9fdfe44ad7b1c7051d607ef87407ac33ba3832e6a5b75644430a89371dc519ecdffa1462108
SSDEEP

6144:wn4ghzmcDgHu8ACb89xurVJMu8hPb5x3Qf:wn9/DgO8ACsOVJh8hPb5pg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5f255215daf51c9fd06e7f7acef824f_JaffaCakes118

Files

f5f255215daf51c9fd06e7f7acef824f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rawdat
Size: 185KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE