3218b9daeb630e99e134aadd1ebe0fde_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3218b9daeb630e99e134aadd1ebe0fde_JaffaCakes118
Size

194KB
MD5

3218b9daeb630e99e134aadd1ebe0fde
SHA1

e733055f0e8fb741cf3bf94ba8c9346bee1d5828
SHA256

0af42b11c7941e91055461e0e666c6b28cd0786ac719534068a2c2c8e0123997
SHA512

a315c49a046f57adaf890a8f8f02370e8c93f1fec45bf951a72f0781c7203f6a507d93012df3163621f8e48650737d51aaaef7843426f66e7e88864cad03cc9a
SSDEEP

6144:ttdmbcvsd8lrkTUDH0u+Xu9TODRLeY1TvSN:ttdmb1d8luf+9TOFeY1zSN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3218b9daeb630e99e134aadd1ebe0fde_JaffaCakes118

Files

3218b9daeb630e99e134aadd1ebe0fde_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

CODE
Size: 188KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE