03344081580cec5fc5b6ff4c6dc44028_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03344081580cec5fc5b6ff4c6dc44028_JaffaCakes118
Size

50KB
MD5

03344081580cec5fc5b6ff4c6dc44028
SHA1

8af3a416837cfc61c752cb51c73b96240a94afe5
SHA256

93f610e19a4687c0a7d61cd7aa30f46e064fd1d803b00cd57c202abc1b611573
SHA512

90fd03b8258d3aa1374ba17bb0c8db61e43e66f767a36ce83db41a6149d557949fba608f3c09906ac4804c777f8467fe98bca4f38bbe98edeb88a46916b8e200
SSDEEP

1536:oADaXvfrh30Lffft/Mw8jF2rAe9ChYxmxXa4pW26:oQAvDh30jxJB9CyxaXjEH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03344081580cec5fc5b6ff4c6dc44028_JaffaCakes118

Files

03344081580cec5fc5b6ff4c6dc44028_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4afcd3281e13fec5d5a0ab4d92335928

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

icmp

IcmpCloseHandle
IcmpSendEcho
do_echo_req
IcmpCreateFile

lz32

LZClose
CopyLZFile
LZCloseFile
LZDone
LZInit
LZRead

Sections

.text
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE