f63ed2fe594c684ac7161db7e6d659aa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f63ed2fe594c684ac7161db7e6d659aa_JaffaCakes118
Size

86KB
MD5

f63ed2fe594c684ac7161db7e6d659aa
SHA1

99d29f4685b195a7d5177d0cdee4e283dd104037
SHA256

8fb333d627a7f528b4b58f6cb33bfc104b093c8f5fe0f05bf5c0435b5674e5b9
SHA512

a3d48c507443308fdde1e7205e21716026e23d683cffb0d98055f4f5e29a24652fa7b7a516fcedf9ebbe25bc5bf4b75d4054c15b46d4e84054f522fd3ec21634
SSDEEP

1536:M8iNzFxn0+BdmxeN+7U9W2B5GhMLsoU1EXTeUFlbS4JSuV:MzNfn0+SMA792B53vTeUnbS4P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f63ed2fe594c684ac7161db7e6d659aa_JaffaCakes118

Files

f63ed2fe594c684ac7161db7e6d659aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cc0dd50052b8732879b11ebd9d9dc89e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FreeLibrary
GetModuleHandleA
GetProcAddress
LoadLibraryA
lstrcatA
lstrcpyA
lstrlenA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE