3640d90e24169297360bc3605967b230_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3640d90e24169297360bc3605967b230_JaffaCakes118
Size

52KB
MD5

3640d90e24169297360bc3605967b230
SHA1

a244e40cf166e15b332c3ebbc894c9f0a88d3bbc
SHA256

5f6023c80ae0f8e432f94bb83b632f5ca3466710eaa3af08d4a0bfd594f17703
SHA512

06034f74efba972e61a298c110c5465f5207b59a836701df0bc19edcbe9e9481c5460b31b0131766e7710af98d73ffd0cefee63e0008abbd187b641cd160a52f
SSDEEP

1536:2eehRa2B+vh+gQdNEIAf/uNo4AunA8xz7fSCjflyP:nehRfSDQFk/go4AuAQz7fSCroP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3640d90e24169297360bc3605967b230_JaffaCakes118

Files

3640d90e24169297360bc3605967b230_JaffaCakes118
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.data
Size: 47KB - Virtual size: 888KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE