089bbb77f6d0dcfe82c5a1f1a8299eb8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

089bbb77f6d0dcfe82c5a1f1a8299eb8_JaffaCakes118
Size

79KB
MD5

089bbb77f6d0dcfe82c5a1f1a8299eb8
SHA1

ba925a5d1305a9bbc49c711e63508e1388996bfc
SHA256

0a3738fde9e978905cd3bb2fdeb3e7f8d06799c1d1cfd808a8c98ba912d7b52d
SHA512

adc5e8753af0470aa690cb78b920d97300c5f7cc37a432d12db7d05b8db38c6e04fb3e98733a37456156f1349fa5d3a3ff28157030806db09db8a84bd46192ea
SSDEEP

1536:xj1sVNp0GiQCXdaR5w2vcMc7T3tFCpbFP8WQwO:xZsWG1GdwJcMUT/CnFO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
089bbb77f6d0dcfe82c5a1f1a8299eb8_JaffaCakes118

Files

089bbb77f6d0dcfe82c5a1f1a8299eb8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

95f04f65f86769d1135b2810eb01a7af

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpA
GetProcAddress
LoadLibraryA
VirtualAlloc
lstrlenA

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ