23ba4ba923f02e369691865a72115287_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23ba4ba923f02e369691865a72115287_JaffaCakes118
Size

97KB
MD5

23ba4ba923f02e369691865a72115287
SHA1

cc6c3cc43c72dfb7529281a54c11213933b482b2
SHA256

50bf3ee0f78d4891c38462899696177c2911fe508bd411a7362143dad3882e2a
SHA512

93152763c0c106cfa433a15789a771b31238667521eff9e5ef5b3873d75ed7ecfffa1ef42e2ef9abdbb1af1cf570f212ac4537c168d9dc884f683c41a462741b
SSDEEP

3072:gv3AJmQnnqzkiS5Sd4m383t6KBXjS3Vix1oJ3kkzc2DSL:83tQnqpS5e4mQt6KkVoI3gdL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23ba4ba923f02e369691865a72115287_JaffaCakes118

Files

23ba4ba923f02e369691865a72115287_JaffaCakes118
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 77KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE