0dd6c641a40173a9e99aca1011dfc868_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0dd6c641a40173a9e99aca1011dfc868_JaffaCakes118
Size

69KB
MD5

0dd6c641a40173a9e99aca1011dfc868
SHA1

4b6367d0a9f7094b8e37315085259d80435decd6
SHA256

673a6448d29e479fe78a65813b058cabd791f995e46a4bf5a90c8b129441892c
SHA512

cdab7b3d83fc3df8cca8805f6559587e478da418bf15e880d248ec0e325fb2f7464d7e4ae1b6a760ebb0a9fbf1bb451e3831356f38ed3b7cb277aaa7d930a413
SSDEEP

1536:R/d2F+tXxql30k/Gb82w5RT7LD3OEetyQteVxjXIUl:R7h630HbeD7LD3OEe/cTkUl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dd6c641a40173a9e99aca1011dfc868_JaffaCakes118

Files

0dd6c641a40173a9e99aca1011dfc868_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 63KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE