fdbb12545c53c6738ce5cedb58757a03_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdbb12545c53c6738ce5cedb58757a03_JaffaCakes118
Size

9.4MB
MD5

fdbb12545c53c6738ce5cedb58757a03
SHA1

e837e659700686688f9c04d8bc65fba819f905f1
SHA256

b52dec63d81d518297dd5768efcb763fc3bf3338174be2cdd9b3dc4c341c348e
SHA512

3a479354a94a33c31f06e81e8435ad4115d57361b27df5f1e8b146cc33f0b8dce9247ff4e655c6c9a12954768e878a78393d47285f55e879b199cc3cc3002b20
SSDEEP

196608:KgM8U9MftZzlqdVCLcjS8xfyEXt2KHlCngdm8LOSo8an4o:0KfVayc28xfZ9F3tLn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdbb12545c53c6738ce5cedb58757a03_JaffaCakes118

Files

fdbb12545c53c6738ce5cedb58757a03_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.text
Size: 1024B - Virtual size: 634B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9.4MB - Virtual size: 9.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ