079538e965b9748f8314ee2bac04113c_JaffaCakes118 | Triage

Sharing

General

Target

079538e965b9748f8314ee2bac04113c_JaffaCakes118
Size

14KB
MD5

079538e965b9748f8314ee2bac04113c
SHA1

f95ef64cd02eb9049eea67d7eaae5cdb78d66caa
SHA256

d785c2fe487044ed17b4a9432f977dcc7a8f56a0cbd855d7cf3d2258f39b7f78
SHA512

8f4bdccf0cbe9da60ff6549b7d0f6db08181fb2e1378737234d013ef53c53466bea1c609dac82bacb5ee30788a4f4b7642c7010bc5d248c98d2326f0ae67d19e
SSDEEP

192:LsMViYeY5c0hHvIMI3LkXKiPNTd2fPdLWtIs46z8242/g3Ih4SgpW7rU1wfXTR+k:NiBhsQMyYPSNLWtFTz832/gs4UY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
079538e965b9748f8314ee2bac04113c_JaffaCakes118

Files

079538e965b9748f8314ee2bac04113c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

150dd6db667760bbcbe2f591f362bc9b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP

ntdll

ZwAllocateVirtualMemory

Sections

.text
Size: 512B - Virtual size: 85B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ