10bd6444fd0c0f0a9b9ca8fa3dc52666_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10bd6444fd0c0f0a9b9ca8fa3dc52666_JaffaCakes118
Size

208KB
MD5

10bd6444fd0c0f0a9b9ca8fa3dc52666
SHA1

a3e3b0afcf886829a0e4730383698d7b63e38e90
SHA256

b4212288bdb23e67adb5740efc3b446b8ac01acb5dc534d8dc710b9d19c419b6
SHA512

5a81f496ac12cebe4f1defafb276f77ef2124d9bd6e97c602db431f43b98a126d1702419e55f29b20424a9021fb9878eb4c0b0a3c346276a5a2f64f965b1dda3
SSDEEP

3072:NPAF7VkITRFHeuklb1UIdba+9P1xgdS11fFwPGWmKWkDMrr2YbBTX8:dK5bTRF5GZUCGKPqS1ZFCLWkDMDX8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10bd6444fd0c0f0a9b9ca8fa3dc52666_JaffaCakes118

Files

10bd6444fd0c0f0a9b9ca8fa3dc52666_JaffaCakes118
.exe windows:5 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 85KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ