f94a15eaaa6ab0bb514964acd7768eb8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f94a15eaaa6ab0bb514964acd7768eb8_JaffaCakes118
Size

130KB
MD5

f94a15eaaa6ab0bb514964acd7768eb8
SHA1

f9b80fc0a69df68bf44644bc40bea4d492be26d5
SHA256

9710d71f4a73c78bf2238e1ea3789ab355268bda61d95cd9b902c0262bad75ee
SHA512

55743736c5c34290b9d0c3819634fa5526f7d21eea5adc42007ab88fe7cf3a86ae5b920d39c01add0f0e90dc4f7884d58ee990026c71e157ff6370765aff8d49
SSDEEP

3072:irL/nHS6eu1k2PuOOdMOALbTNR0H4ZTtSjE8vjtPg/Y3wnhZ3Rpv:uDSuZPuOO6OwncYZTtSjXvjtG5f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f94a15eaaa6ab0bb514964acd7768eb8_JaffaCakes118

Files

f94a15eaaa6ab0bb514964acd7768eb8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

CODE
Size: 124KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE