296f5dd8d63b2c48029ff1e90c6851c2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

296f5dd8d63b2c48029ff1e90c6851c2_JaffaCakes118
Size

140KB
MD5

296f5dd8d63b2c48029ff1e90c6851c2
SHA1

ac26e066450c5054439257ef435ab7c0f8bea764
SHA256

d8a3298d59f582baf25547002f8738740d9c193ded2f9096734d342b0b36fa3f
SHA512

f41b868efae71be749740dccba113c89635d0faece95b970e0f41db9ae247d96adaa521e037367b2e3679aff7ac4879c042cd48c807adb0d21296f0185d23401
SSDEEP

3072:Xo1s2n8aQo1s2n8aQo1s2n8aTo1s2n8a:Xus2n8aQus2n8aQus2n8aTus2n8a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
296f5dd8d63b2c48029ff1e90c6851c2_JaffaCakes118

Files

296f5dd8d63b2c48029ff1e90c6851c2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f9ade0aa18f660a34a4fa23392e21838

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess

Sections

.bss
Size: - Virtual size: 66KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE