80d7491c49875ac31a737f433cc43056_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

80d7491c49875ac31a737f433cc43056_JaffaCakes118
Size

357KB
MD5

80d7491c49875ac31a737f433cc43056
SHA1

7683c2a783add42e43f5bda8f92fbcee022f0356
SHA256

060a3a74589b512b1e50c10ecc893032b98111a5e962f38ac88b9cd0e13c8430
SHA512

9f471962664ebcd82543ff58642f7d4e8951dd60db012d876cbebbb4021d74476063367f642606e0371c3c936407cd231bd1f92b11c8bfbd897d4a91b0977465
SSDEEP

6144:a5jRAL1QDXP+XQ9lXIOx+2uLVtpOu/5ux3utEuBhhWPKdMts:MjK1QDqQDXIUbuMuMuLhhKts

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
80d7491c49875ac31a737f433cc43056_JaffaCakes118

Files

80d7491c49875ac31a737f433cc43056_JaffaCakes118
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 110KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE