1175edf9bbd2f3d2d7a6be87d8d7e6e1_JaffaCakes118 | Triage

Sharing

General

Target

1175edf9bbd2f3d2d7a6be87d8d7e6e1_JaffaCakes118
Size

572KB
MD5

1175edf9bbd2f3d2d7a6be87d8d7e6e1
SHA1

113050b73665ca1d0f8a927f7183365a479445ca
SHA256

b19b3ba6ef57017984ceaf7ae154eb4716525242818d710be4ce3308fc82eac9
SHA512

29dea5be54dd4a4d9a7e23ffa2823ce74c5817ba82f55c874afbaa09d3eaf61f3023af6cd89863795838a7ba972c63f65a2aa25dd288444e4c90ca8d70d0ac38
SSDEEP

12288:asGpbYLvVMDbNYYakakpBaDnXfC2bQYh5YyYvQlkA4FUsoU1kBL07:a7pbYLvV6bJ8MsDvCXYhmyCVA4FcU1km

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1175edf9bbd2f3d2d7a6be87d8d7e6e1_JaffaCakes118

Files

1175edf9bbd2f3d2d7a6be87d8d7e6e1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.text
Size: - Virtual size: 784KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 239KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 57KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 51KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.p
Size: 568KB - Virtual size: 577KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ