38934d7bf812a5ec3ff4c661271d7fe3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38934d7bf812a5ec3ff4c661271d7fe3_JaffaCakes118
Size

220KB
MD5

38934d7bf812a5ec3ff4c661271d7fe3
SHA1

ae0d43468fb0dc9eed1d6ca7c78e48f06a92e7e5
SHA256

af6ce665cc67d7433b51298f472f4cef696469077939492aea69e4c9edb6a1ac
SHA512

1934c0adc4859d71dd60a6ef37b47d64ad0b68c46af10554f356f5f87fc468f1c605f533ff7802d92e6001f55b660214a6bff9fc8e9121092f248bfe555a44c7
SSDEEP

6144:sXCF5vnncbc4vXu4LECZdj5GRMcbEybf2437oQAnLb:dRchXu4wW0RMcbXpmb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38934d7bf812a5ec3ff4c661271d7fe3_JaffaCakes118

Files

38934d7bf812a5ec3ff4c661271d7fe3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

29bd810f448a640871ce275f73c6c03a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
SetLastError
LoadLibraryA

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ