089504c10666421a2b193b02358c5700_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

089504c10666421a2b193b02358c5700_JaffaCakes118
Size

129KB
MD5

089504c10666421a2b193b02358c5700
SHA1

7e1ae54f807624deacaf4df92f2102f7a2bfe739
SHA256

d97695137c849759dac57ac31f4b052413cccf25f258c0624827aa3baff88226
SHA512

2c791d33b414a9581579cdcd5b7b12f99ba6662602c07b1e74e5f29ec0b544bd140f57323c236d645456153a01064e6cda46f1805653aa4bf3d108747eab1c7f
SSDEEP

3072:K3kIO94O830bdc4qH+9Y1MjcNHRbgxHgdVT6xjV1Vp:skkkbW+92N8APTC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
089504c10666421a2b193b02358c5700_JaffaCakes118

Files

089504c10666421a2b193b02358c5700_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

CODE
Size: 124KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE