15577ca9efe8ad0b16961da92ddc3a5b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15577ca9efe8ad0b16961da92ddc3a5b_JaffaCakes118
Size

171KB
MD5

15577ca9efe8ad0b16961da92ddc3a5b
SHA1

44ec9d2186b5ed679c2057ac06b3069649a7ebae
SHA256

59f0b3b6f042f5f48f35597ddc31932757eb9903181f571d9ee9c1e2ab04b4b8
SHA512

746fad93f5f6e153d906b8259f5d778d9a3f05bfd6b42ae25bdd981630e7cd7e143c256c7890290a8557db44bb185d08e6390bf9d5d75a444c60baee16aa0231
SSDEEP

3072:ss0Q/UMgl1chOGkp1nQ/oCpGcfnsUj3JKu6XILRHPZFCUVm9BWD/0RdgYt:ssHBG2hORpao960u6XILRHBVmOD/6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15577ca9efe8ad0b16961da92ddc3a5b_JaffaCakes118

Files

15577ca9efe8ad0b16961da92ddc3a5b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 162KB - Virtual size: 448KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE