0765f221f76b9eafd77f61e36471318b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0765f221f76b9eafd77f61e36471318b_JaffaCakes118
Size

58KB
MD5

0765f221f76b9eafd77f61e36471318b
SHA1

975540a86cc5cf2b574ce5a981bd44e46097a83a
SHA256

ec8b835d1acd08acf6cd4ff3ddb95950791aa68a89cb6573153f6a82445c9821
SHA512

c9eebc2fd7669055bd221d8271adff18d40b9dda5b571fbd35e9cb1f63fad8c42979cfb69fe0da63e2a64c3bd9ae5a3d1e3da5e93742daa4adb0262ae1173ea4
SSDEEP

768:VvLXnMbKS8X1HmxI89zeZzKdPnPkqIH2Ircr678LPJBERKOJ/pM+NIvUw1YeUPF:V38yGxIAz0zEkBH2IFGDERVhMfR1Ye0F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0765f221f76b9eafd77f61e36471318b_JaffaCakes118

Files

0765f221f76b9eafd77f61e36471318b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 47KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE