1c7e0feec79a0858d45245ed01363808_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c7e0feec79a0858d45245ed01363808_JaffaCakes118
Size

119KB
MD5

1c7e0feec79a0858d45245ed01363808
SHA1

08ab62e21fa4e429d94ec21da6ea79ae4a96d758
SHA256

1326dc911e70adf1a76a81a05b97553af440b9b8490f188790af34f76f7b124c
SHA512

e93151d42598cc1fd7003e0971ab7d02029d78c79494b7d09bd883df5cf7c95b1dfb36c326992f0fd7815fb8bdf6574b42c61de38ab035492be0b678f5a4eca8
SSDEEP

3072:1R7SBigwieUA5qMe/5TnYuLTtzL+aYml8HmA7PNMdhYmUf4RyI:nSBigwiIW/BYuLZfAx+RH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c7e0feec79a0858d45245ed01363808_JaffaCakes118

Files

1c7e0feec79a0858d45245ed01363808_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d138b4428074a69c52cd454d3426b9ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA
VirtualAlloc
VirtualFree

Sections

.text
Size: 51KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ihsv
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xur
Size: - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE