06f71f49dfcc25eb25e193390d2d904d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06f71f49dfcc25eb25e193390d2d904d_JaffaCakes118
Size

48KB
MD5

06f71f49dfcc25eb25e193390d2d904d
SHA1

88a26737041bc929adfb92cc01fe78fc81336174
SHA256

e8f79ed5979fe43a282ded936f7386a76ac7ccaf8ec1cbf2eb8351e778f0e5dd
SHA512

87a09213f63dbfe6c65af65ca5aaa7b1adecae65c748554d303cf4b653b0fc4353bda1c337fe8ca2a544345d33eda671b69d9a94a9fadd8b83183a40b72fa59b
SSDEEP

768:oKjAmirljAczwYVUaOL3yvgmee4C9VWJwVY0pzElKPEioGUqICnq5z+lmL/o6:DA/r7KJ3yv7ee4fwVHpE0PEi//IA5S/x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06f71f49dfcc25eb25e193390d2d904d_JaffaCakes118

Files

06f71f49dfcc25eb25e193390d2d904d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

79b3362178937bf9559741c46bb9e035

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 19KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g
Size: 48KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ