06b3ceb05381d4701ed46e250c4c2f8f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06b3ceb05381d4701ed46e250c4c2f8f_JaffaCakes118
Size

325KB
MD5

06b3ceb05381d4701ed46e250c4c2f8f
SHA1

f04f517a9cc85b82fb53b24efae80fd16a719066
SHA256

57a9cdb02854caa17e241b1e77eb2807766d087db3166f55e5fa54ef0092192e
SHA512

1779e87de9cc0dcba1073639a40fa1eafecde67cfaac9bf25426b72fabff83051c544af11d6173735f2f28a81f7dbcfe33da03e4c84a858604898c23cc7ee993
SSDEEP

6144:oKPirc9kcrQ5ZxNo0lebuX8xIP+Mobfn0R8KSb2q/excYwTjLigmoksxf0Jo9:oJr8krzNdebnyPfMfQfaN/qeTv2oksx/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06b3ceb05381d4701ed46e250c4c2f8f_JaffaCakes118

Files

06b3ceb05381d4701ed46e250c4c2f8f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.naked1
Size: - Virtual size: 816KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.naked2
Size: 320KB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ