080923db620033f92fb6ec3d8868d2b0_JaffaCakes118 | Triage

Sharing

General

Target

080923db620033f92fb6ec3d8868d2b0_JaffaCakes118
Size

762KB
MD5

080923db620033f92fb6ec3d8868d2b0
SHA1

388b71874412718eec162a7bd9a2d0d528c8f8bc
SHA256

a3f87cbb4e64cf37d5dfc0310898860f4771c6d373e3d0a2b81777c2c05f59b8
SHA512

7535c4d28b2ce6645a0b5590cc7280a9945c7847b0821dbc2952a2e2d22ee72df93862c58d11fbc6ed2fca73ae676fa3ae8701133278b6b80f85615cf187c32f
SSDEEP

12288:TKFBwhN3VEkNw5MG5KVoSXLu2qZxTPbH9tii5uGZV:2FBwjVEkNkMG58LTqxTPbdtii5uGZV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
080923db620033f92fb6ec3d8868d2b0_JaffaCakes118

Files

080923db620033f92fb6ec3d8868d2b0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

88381b84da56810b869e897e6d45bd58

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress

user32

EnumChildWindows

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 274KB - Virtual size: 273KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.main
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stub
Size: 380KB - Virtual size: 384KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE