1c03370879d24cab66d2fbbe633e3576_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c03370879d24cab66d2fbbe633e3576_JaffaCakes118
Size

30KB
MD5

1c03370879d24cab66d2fbbe633e3576
SHA1

baf8aa820806f5987860ff65735f655667dc919c
SHA256

b08a1fc1c0016ca5ad2be6257cdc7a344abb1bce4c6f41c8da8a7a46dee25909
SHA512

48548d1842adea64dc1949f1bf5b73b6b221fca92076f95916ba1968fa1f7e50002cd4f519812f988b6622b867cfd250d88787b7d9ea04eb933f9253a481ad68
SSDEEP

768:o8GTKIJ9bIxOo3K/9wkrKGz2FpeBHiJJ7Ta:ofTf9sxOo6CkrKGqikDC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c03370879d24cab66d2fbbe633e3576_JaffaCakes118

Files

1c03370879d24cab66d2fbbe633e3576_JaffaCakes118
.exe windows:1 windows x86 arch:x86

70b38f002532c6dfdbd318dc65803402

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseSemaphore
LoadLibraryA
ExitProcess
GetProcAddress
VirtualAlloc

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 231KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ