188045fba8185296751fa4285ef6e884_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

188045fba8185296751fa4285ef6e884_JaffaCakes118
Size

49KB
MD5

188045fba8185296751fa4285ef6e884
SHA1

56f5efa5f5cb243e0ff648fe814dd72653dd1f08
SHA256

970aa2b5d4da6e1fa1f9a14999f7120f0b4fb3390d0c70c702443e6ebf8e3f23
SHA512

6e4c703c379280a656e4f87f064f021b6402877056af9a73d184865db0ac3dca16e6807e9d4dcdba236b67edbbb135d2167e3887bf32882a34917771e5bd37e6
SSDEEP

768:y1EdsNgkEidDTPIp+1Jakp/GWrV6/dU+Uf/a8Dd+wc4QmSb+koK:yGONgkddnbakDaad+wc4dSqN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
188045fba8185296751fa4285ef6e884_JaffaCakes118

Files

188045fba8185296751fa4285ef6e884_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa77d18b40072a7e1dc36630aafffd27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualProtect

Sections

.text
Size: 44KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nah
Size: 830B - Virtual size: 830B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

FCryptor
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ