23d552dee8b9bd770f5a740a88818cc0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23d552dee8b9bd770f5a740a88818cc0_JaffaCakes118
Size

132KB
MD5

23d552dee8b9bd770f5a740a88818cc0
SHA1

4e67216d9ccaa23f13b57520d221688b7218f5fb
SHA256

42d1a1ec83c0d97f0dc34e0cdfcdb6509fbb9210630effcc9a072dcf2db0c28e
SHA512

919896b53be71f2cdb832f368668c2eecc4d286235227bba34a709b521ab5cb7162db7ed648c094d9a4ac2df43bd3553a29e270e4afc026ac94bf14f14624a5f
SSDEEP

1536:ScHYhBaVBvhgI1mL3VPzqX/GGCkGKA9+xoC3a/NuIFXkbP1:pH1TYLtzy/pTG59+xoCKFOP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23d552dee8b9bd770f5a740a88818cc0_JaffaCakes118

Files

23d552dee8b9bd770f5a740a88818cc0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

925b5b6ab55c2b01631127097a6fbabd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rsdeploy

Reloc
Initialize
ResolveImportDLL

mscoree

GetCORSystemDirectory

kernel32

VirtualProtect
GetModuleFileNameA
LoadLibraryExA
LoadLibraryA
GetProcAddress
GetVersionExA
FreeLibrary

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rmnet
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE