5775ec2251491124e906ec5133e0dab8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5775ec2251491124e906ec5133e0dab8_JaffaCakes118
Size

12KB
MD5

5775ec2251491124e906ec5133e0dab8
SHA1

e7fab1aa06366027fbc470e97aef945e99a7308c
SHA256

dbf849e0d2d69f8745344e6730cdfb052befe25b59068e0fa45d83850f5e816c
SHA512

bae4e1202afb205d9c1243d5407a33ef0e4f634f6bcf98c32c36c3bcc4a6497a8f78706c4c5a59bc4e09eea1d08e3a6aab487c65fcf3d02bf27144d71c22fbe8
SSDEEP

192:FyF1UFq0AcrsZz6NctvZg6wP0+oaOTXPfUl:F01U3AgNcLgjHoaOTXW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5775ec2251491124e906ec5133e0dab8_JaffaCakes118

Files

5775ec2251491124e906ec5133e0dab8_JaffaCakes118
.exe windows:1 windows x86 arch:x86

51b2dbf6281079a082225b6210266206

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
IsBadCodePtr

Sections

.text
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE