437adc1ee1cf236361467e796ad0a63c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

437adc1ee1cf236361467e796ad0a63c_JaffaCakes118
Size

267KB
MD5

437adc1ee1cf236361467e796ad0a63c
SHA1

d0fc6166d58019df341e7745dc3e26a45b2d6645
SHA256

e34e4551519837b0af6b94f8770442ec32b704d5db31596e55077f3dba9009f8
SHA512

70668fb136a90ed2b6537b0cdeb9ea7b5cc5bded97d2409b02314ec3517a6ee371e43b53a8d18c95a9e24a8fc58c93c0d950b2cf8450fffe87c72c22ae52b18f
SSDEEP

6144:l6ASSS8LfIDVMB7oVy45IUyYjGyiOtd1qjBCIGUOHDIN8go5:l6Ae8Ca7G6UyYfBd1kDN8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
437adc1ee1cf236361467e796ad0a63c_JaffaCakes118

Files

437adc1ee1cf236361467e796ad0a63c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

79b3362178937bf9559741c46bb9e035

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 730B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 262KB - Virtual size: 262KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE