225dcd1ee7e1a2c2323ce22718e8a3c3_JaffaCakes118 | Triage

Sharing

General

Target

225dcd1ee7e1a2c2323ce22718e8a3c3_JaffaCakes118
Size

50KB
MD5

225dcd1ee7e1a2c2323ce22718e8a3c3
SHA1

884f40077eb9fd13041c5204f7f26a504440c07c
SHA256

bdcc138e01e91f282f0d7d4e0edfdc0c8439ec80f20add3a38e8ac2745a8a252
SHA512

0eb29b0f973ab91968e03ab7b6dbd684725051a44abcc215a83ec6746f45ea78cf9594a1a4bd34932c959a5ed8e472983847491be0c02a581770020b1da254d7
SSDEEP

768:wNVBVB3iF/hCiV6BN2mEHVpabRSfT/vUOLXbX9y/jQO3/O:wV3biV11IbQT/5zbX9yQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
225dcd1ee7e1a2c2323ce22718e8a3c3_JaffaCakes118

Files

225dcd1ee7e1a2c2323ce22718e8a3c3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 13KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tvcrypt
Size: 512B - Virtual size: 4KB

.gbcrypt
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE