38d6dc5343a1aebd656d823781730272_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38d6dc5343a1aebd656d823781730272_JaffaCakes118
Size

564KB
MD5

38d6dc5343a1aebd656d823781730272
SHA1

6d4aa04a70daa4d8231349b4ca62bff79978c85d
SHA256

6fca2396347b0c08e989e089f9df466d1375fd6f6d6e2556a4122fe31e6b23f7
SHA512

c21f0425cdbad759b0ebabb4890310b26a37f72e5a7374362ab3065d208ee3605e784b7fdc22b03e6cbbe61b7c4836e7f01f19c96bb94c7f6a0f5d7eab844939
SSDEEP

12288:sg9v/2hBKF98Wad64wMjNUUdqR8EsAJqm5wFpSA9YwyC7:fvehBRZwM618EsiGNYwyQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38d6dc5343a1aebd656d823781730272_JaffaCakes118

Files

38d6dc5343a1aebd656d823781730272_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2c35ed123bf7fb5532653325910c7a41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualAlloc
VirtualFree

Sections

.text
Size: 472KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.llydd
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE