2313192f0d61466e08387f56518ae0a5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2313192f0d61466e08387f56518ae0a5_JaffaCakes118
Size

460KB
MD5

2313192f0d61466e08387f56518ae0a5
SHA1

96da62bd95f612acfe101b7fffa21317e30b3522
SHA256

7d22d4fa3ed1d7d52c3042fbd2e961651833fbb8f72f8355ee6e010fc8117a85
SHA512

d7990bef2184fb64a11cfca12cc0b3c832539f0047806809b22feeffa8fb7c565c377a2c8a772fa0b2ff515d22b6595ebfbe68fc3fd62dbd852aa40ce5dadd00
SSDEEP

6144:RT2XIh4v3LxqcDKS9diG9u2Uq5Ax3MN9q1D12MY/vEmOzHFwQhQtIgtviVWI4Jzz:RuzvjDbL9u2UoNsVUMMEmGFE5piVwBz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2313192f0d61466e08387f56518ae0a5_JaffaCakes118

Files

2313192f0d61466e08387f56518ae0a5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.naked1
Size: - Virtual size: 776KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.naked2
Size: 455KB - Virtual size: 456KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ