165f24e30929df0b84c6e32d426fe2e7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

165f24e30929df0b84c6e32d426fe2e7_JaffaCakes118
Size

313KB
MD5

165f24e30929df0b84c6e32d426fe2e7
SHA1

174bc1e9fbe50f6f3d48ef9e2489743d5727b4b2
SHA256

e3bf86fb484765bd6ab849f86ffd3cc686c4a1da549fc0e34ee87eb6bd52ff30
SHA512

a7da367318b5842d4cc4bd19a3c5f495776b744629615102f4c35728ff14b03ddab9f7e60880395d0a3a6ac7abe1c0949c4aca2c697029df3a233081c95f81dd
SSDEEP

6144:VkFy7TcDFETq+M03qFx/KXAIW4iIfASY7tu3tamUy3ohKt5k0m:GFy7gxETn/e/6pW7IYHtGVUgo0t1m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
165f24e30929df0b84c6e32d426fe2e7_JaffaCakes118

Files

165f24e30929df0b84c6e32d426fe2e7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.naked1
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.naked2
Size: 308KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

wjyl1
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE