35155ccba2567a965faa3925b2e788df_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35155ccba2567a965faa3925b2e788df_JaffaCakes118
Size

143KB
MD5

35155ccba2567a965faa3925b2e788df
SHA1

ddbe127efa63c79aa2f0efe8b02d0d3e88c35a38
SHA256

e1cc2c2667a0650d941bb61ffc88e76522127de778a1fe055b0af2aa326caf7a
SHA512

0eb00ce5bb981e127d16bb5d4abc0b7e330091468b1ad864ad3ac6c36942f4580c5eed06ca76edcb688aefeb68a35a01e98096f75d62633359ae06224b1fb745
SSDEEP

3072:0PxeB8I3DQ6ItlO5/WtK9mudTCLpuHnte7Cxz8nEiz4GM2aj9msUtiOp+w:0QB8ITZItlk/WtKXTqonte7CxQRkGMT5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35155ccba2567a965faa3925b2e788df_JaffaCakes118

Files

35155ccba2567a965faa3925b2e788df_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.d9aso23
Size: 138KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE