38756a601fa9bdd735dfd68a5be5001e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38756a601fa9bdd735dfd68a5be5001e_JaffaCakes118
Size

533KB
MD5

38756a601fa9bdd735dfd68a5be5001e
SHA1

58aeada29697c10a1e50ecda0027c4bc7e1ff1c4
SHA256

f50a137ac1c321b26bd1457e61b219946a3040bd0b6c7fe8ee1795d9b0908a15
SHA512

d70189a298683036cc66268f81a899a6e8a88a66ff4018acf109853a56baa2c2f340f91ff109ae47f4588d192a4ff1a2fd56328e5080e2122d9f7a9b651c7c5b
SSDEEP

12288:CvUzVupyrWVY7GfxPZ521Or+3hTcRdzYffrSJ:4Uz44r+5ZGw+3ZczMrq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38756a601fa9bdd735dfd68a5be5001e_JaffaCakes118

Files

38756a601fa9bdd735dfd68a5be5001e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

12cb72fbf3308a9787db139482b7d132

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetVersionExA
LoadLibraryA
GetProcAddress
ExitProcess

Sections

.text
Size: 87KB - Virtual size: 159KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 115KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 403KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE