301931496a37eafe0320157fa06c4e73_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

301931496a37eafe0320157fa06c4e73_JaffaCakes118
Size

86KB
MD5

301931496a37eafe0320157fa06c4e73
SHA1

fb8d18d5c9e05b6636c116178bc997e47095f5e9
SHA256

6f848cc1a592ca613cd261e2c499bf5c7b1ef186ec6f9480c3425d2f4953addd
SHA512

73b77832d7bac4eb4c781f753daaf3c4cdeb67a80abe0bf8f49d20000f7502fb97497b9953d1457edce8cd71233c611f03bb011ea4446d9d89e5e2643a3966c5
SSDEEP

1536:Xj/hSRiAhS4n6eI2bxS+bhSbkQWFBGMNys78H9vCjw+ZjyTQi/nGHZsKMgphdow:Xj/URiw6eI2gaSbtWSMNQKI3vMWKMkjt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
301931496a37eafe0320157fa06c4e73_JaffaCakes118

Files

301931496a37eafe0320157fa06c4e73_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.text
Size: - Virtual size: 101KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 27KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

exever
Size: - Virtual size: 579B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.t
Size: 82KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ