3673db31bcc2f01865589067e3d5c434_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3673db31bcc2f01865589067e3d5c434_JaffaCakes118
Size

136KB
MD5

3673db31bcc2f01865589067e3d5c434
SHA1

975e990e04cfc2986ab0ae5b2bd7a8a2d0dae8dd
SHA256

8a03c4e1be72d6330aec2bb96d95aa69aed06ccb5f3cb165b83ed9b10a31e983
SHA512

6e5fecfd790bfdfb0f291dc2f6318723c208d2ee556b03c636acf21225888a93e18eef9ad1a5fabf4424747d694e15cce0728e0c0667498598801be771d3621b
SSDEEP

3072:7Dl6858lqq3HRyOihJxeihyLUD7Lqap3SxVzm9m7:7DP8lqV1JxbgMy4Izmw7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3673db31bcc2f01865589067e3d5c434_JaffaCakes118

Files

3673db31bcc2f01865589067e3d5c434_JaffaCakes118
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 132KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE