10976bd14865dd3ebc47a1bdd1b1d38a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10976bd14865dd3ebc47a1bdd1b1d38a_JaffaCakes118
Size

809KB
MD5

10976bd14865dd3ebc47a1bdd1b1d38a
SHA1

5e29b1da0a51b5378835f299db58fd8d3eed0035
SHA256

8511072f4fad2082c4930f88f1071a2ecebb7358d51d55cb65fbd84a08b4c828
SHA512

0d92afaf0e4bf2f53eb39c36ed6dddcc3a2c0233a46ceeddd311a3e4231d4c868447bbf9ffa0f3ec447d368d2b96865729926e7c577d0227d7716b2cddb5ce6f
SSDEEP

24576:TGFlWQcx+LsoZSZN8PVzqNAuHJQJioxq7vScuDJg+ZquWHwAixHXi4:5xVoZG8NzqNAupQJiaLbouWQAiQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10976bd14865dd3ebc47a1bdd1b1d38a_JaffaCakes118

Files

10976bd14865dd3ebc47a1bdd1b1d38a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b2ab9c868a88adb1bc668cb8d724d018

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
LoadLibraryA

Sections

.text
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 634KB - Virtual size: 636KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 102KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE