1572af98b34880ce151a5ab8a7a8e281_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1572af98b34880ce151a5ab8a7a8e281_JaffaCakes118
Size

374KB
MD5

1572af98b34880ce151a5ab8a7a8e281
SHA1

046aece77bd9082f0d03bec871b552df303db3f2
SHA256

772afefacab9c723918bba5ff1235b906fc3d425a5dfc1b3a4f0d952f1609c9c
SHA512

0caf579c933d2b704caa161987e4b4d175ebd95f3bc3c382e77c98763d58f299aea2b1d9edabbcb550847af1f1658efce97a7d464cb46fec9b1b33618ead6bf4
SSDEEP

6144:zIyU5SXdi/QL0JHBgu+hPQ819YFfhNQ3ZAzCKNI5SpacWZozzYkbiKgCbOl:cRItQQIHBxGPQ8jY/NQ3azCKNI7LYYk3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1572af98b34880ce151a5ab8a7a8e281_JaffaCakes118

Files

1572af98b34880ce151a5ab8a7a8e281_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.naked1
Size: - Virtual size: 2.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.naked2
Size: 370KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ