11305b4fea79ef4c39c31eb7279914a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11305b4fea79ef4c39c31eb7279914a0_JaffaCakes118
Size

19KB
MD5

11305b4fea79ef4c39c31eb7279914a0
SHA1

8a8665f4f574015e80e9a9256bc5f4b928883d1e
SHA256

c51c2d5df5511625f3d7d4c8ea49d93ab3bc0c18c41c402ace7c1315e17dae62
SHA512

f3f63e61c77fb8b82fc65620253f195cbdd969f2bb6e2b09d4e11775e99d5a4fdd78bfcdd4929e6f55fdcea23ce88c736d0999fd71d0cdc771f0538ba4be7b91
SSDEEP

384:JB5UfXVknnJ8YpVqsGnZw62IEbK1TAJKGUFfnlcynT:JTUPVy8SGnZwmOK1YRE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11305b4fea79ef4c39c31eb7279914a0_JaffaCakes118

Files

11305b4fea79ef4c39c31eb7279914a0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8456c1a91f2276de9af4257da3f240c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
VirtualAlloc
GetProcAddress

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ