254f881f7cd3c93c4e091d553adc20ac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

254f881f7cd3c93c4e091d553adc20ac_JaffaCakes118
Size

73KB
MD5

254f881f7cd3c93c4e091d553adc20ac
SHA1

28e2e1fc33cfb7903820a1ceab0a163708997b42
SHA256

bb798ea9910ec3d7ccc42a8c30661ca8e32be08bcdbd3c444ce094e78323cb8c
SHA512

493293dba509b82a9a7f35ad6bf27a1b37a3d4ca91124cf14ed38ab05d15adc62883e0e0e6314d3a5bad4fb23b10e66b87db504ab6ef997a3b01665e70c8917f
SSDEEP

1536:6sOEyhSQJW9GdD8w+OJIb9DFrv5q0GXkX+r5/cHb9dgKAG3Ti:fO7nW9KAwSBRv5q0G0X+Oby

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
254f881f7cd3c93c4e091d553adc20ac_JaffaCakes118

Files

254f881f7cd3c93c4e091d553adc20ac_JaffaCakes118
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 68KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE