38a4a99063e48e2787adea43d1d19619_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38a4a99063e48e2787adea43d1d19619_JaffaCakes118
Size

27KB
MD5

38a4a99063e48e2787adea43d1d19619
SHA1

ca1562a70e52198b36290548fd8575e8a3ff9090
SHA256

ed57070cd021409969d9e6a20af1e90428fdc18488775e54ae5b4f91ed7f7e2b
SHA512

9026f1499e4abd2165c77b4b342ab19656972339df18095566c30fb9f06df8811d19accbd6881d8238bb356124ed6cf8c03dc7177f05b57288a63014c7474ecd
SSDEEP

384:JX84Va0YmvUymF1I5WSaqZ0krP9QuK0v70FTsIzt3PdP45EqwoSdWj:V8T03vUymF2Wrxhb1sot3PcEqND

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38a4a99063e48e2787adea43d1d19619_JaffaCakes118

Files

38a4a99063e48e2787adea43d1d19619_JaffaCakes118
.exe windows:1 windows x86 arch:x86

f6fc39be9b8ad39bdd4d0124a1daadde

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
GetProcAddress
VirtualAlloc
lstrcmpA
LoadLibraryA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ