04e7b4906673bdb5bd1bb02924b20e25_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04e7b4906673bdb5bd1bb02924b20e25_JaffaCakes118
Size

54KB
MD5

04e7b4906673bdb5bd1bb02924b20e25
SHA1

7469521460008a7e9a0cca736a759abbbd8cfa3e
SHA256

5103d8b05a0e4a0eacad0a0c341e858abe42bd0036596d5c71bc60bde2d8687a
SHA512

92e1c692f7f1e59570c642d8b173e1244fdbe463e70984bdeb96f31ce33a233364ee095fcbec9c901d6c1e3ff2b502312bb0b06035ac4ce15b774ea1f95df1ad
SSDEEP

768:VVKm4GV4ujtuYgFC5IjezJckOyLb172+oEFZ0TORX3iSHWIwjkdLv/kcH5hUDrps:VQKV1MyVckOG12TGX1HxwjkVnDhI+Hv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04e7b4906673bdb5bd1bb02924b20e25_JaffaCakes118

Files

04e7b4906673bdb5bd1bb02924b20e25_JaffaCakes118
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 44KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE