077dc4b493eabf888227df59e6384f07_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

077dc4b493eabf888227df59e6384f07_JaffaCakes118
Size

56KB
MD5

077dc4b493eabf888227df59e6384f07
SHA1

81b17e453b2db814905cd231ab51cbc9c4067a02
SHA256

b09f7164e9d0d2d65e10e17bf807ede8bbe3445f9407738832405eae495eee77
SHA512

81de8719fb5b9d41b589e72881e6c4da88df53e7408b17c1ea5f484c10a9b0048d14f198b222ba84a14c4490c43e4823bca6ef1399310e3b5a8f71b39ce681c8
SSDEEP

768:Ky4Iin+N3pQqMOesGhEO/5GhWB0/mqkoWfW4vEn2JjwASj:j4fnIQqShh/5GhWB0/jWfTEnyjw9j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
077dc4b493eabf888227df59e6384f07_JaffaCakes118

Files

077dc4b493eabf888227df59e6384f07_JaffaCakes118
.exe windows:4 windows x86 arch:x86

148bf55ceb3e5471ef5f9ffc2bb75e2f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
VirtualProtect

Sections

.text
Size: 24KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XComp
Size: 976B - Virtual size: 976B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE