159c468dba95826a8f213e72e5c67eaa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

159c468dba95826a8f213e72e5c67eaa_JaffaCakes118
Size

235KB
MD5

159c468dba95826a8f213e72e5c67eaa
SHA1

9baef9896944f5c2289ee46b063a6c108e6bcef1
SHA256

e4e86449eee811fd2f2545a3376c07379c0c6aff1776215ef140e369b6e7e6c2
SHA512

648fd061b2c2a4dc3b0a1ff2dbdb5acd15c6cc8d21f81811d58281feca027e9a0c9070e279a6b92f86541e0f847c6d4682fb01a84b848ab3f16bd4138f734f8c
SSDEEP

6144:X7dNuSK3HHwXxCBfco/I9XBNNdqZRufccSP:X7dNufXQxCBfcNbTdqPpP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
159c468dba95826a8f213e72e5c67eaa_JaffaCakes118

Files

159c468dba95826a8f213e72e5c67eaa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 114B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 351B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 501B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ