0383b1589c9c9460e3f14171eb38952d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0383b1589c9c9460e3f14171eb38952d_JaffaCakes118
Size

32KB
MD5

0383b1589c9c9460e3f14171eb38952d
SHA1

b2d912f3229672317167c3cf5c31f0f47699e9f1
SHA256

8d5604dff864254d671cacb6948e4dc27fd5035bee58b80b8adc17066b0829bc
SHA512

1550a84a1046b3989d75d73bc38e34cf6a374333bc18a705df235813ffbdb0ad42e9a8d671b372b61d7e604d6183864ca346572671d1f1cf8a7ad7c48b490b23
SSDEEP

768:NLLT5KTY3uMAdPFVkU6rZ0GJ1/ncW/uqHmiDRNo6:NteY32dKZ0U1/ntWqHmibx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0383b1589c9c9460e3f14171eb38952d_JaffaCakes118

Files

0383b1589c9c9460e3f14171eb38952d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

79b3362178937bf9559741c46bb9e035

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.rdata
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 192KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.y
Size: 28KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ