0b9e4b0c2d4a5ee70c42f2aeff9cde2d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b9e4b0c2d4a5ee70c42f2aeff9cde2d_JaffaCakes118
Size

72KB
MD5

0b9e4b0c2d4a5ee70c42f2aeff9cde2d
SHA1

d27c3abee0c27d8534743fbb7adde8f73f1c94db
SHA256

217a3d72bcb123017db806289dce263dc2c92056e7513483e80f41e37ee7834d
SHA512

7abcae6343e7ad41fc93d175b6f4458f4a4d47f593746014966aa6908678b22b04743fd3b5b4ad99c3241ce6644b3281799095dc0239df55984a5d920ba9824e
SSDEEP

1536:PvkLAyVACH1BlOTVl2sF/al6w2LVErNgnsAuFi:CV9VGTVtF/aswIVE6Ei

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b9e4b0c2d4a5ee70c42f2aeff9cde2d_JaffaCakes118

Files

0b9e4b0c2d4a5ee70c42f2aeff9cde2d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 66KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE