467f0bc5bab4fc14ee09d2dc99bb082a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

467f0bc5bab4fc14ee09d2dc99bb082a_JaffaCakes118
Size

165KB
MD5

467f0bc5bab4fc14ee09d2dc99bb082a
SHA1

4dd7a7142a8e0f9cd5794fd2ea8e9d312365e438
SHA256

29f3d6f890504cd7ea5ef699489111487d223badb90f6c71212f92284c508ba6
SHA512

0fe05c3b424ea498750ea99c7c92720018bf8c2c032e201eda06f23e4e54a7f5fa9737baa6a9ae079b5a39048bd6da73ea75088ff4aec87ea35bc1fd08e75562
SSDEEP

3072:tG4tOGpzShq3kVMmnlcd3r/xOPXK51AzIvfsvC94tz91e4e8gcB1jBZ:9OGt+q3TIQb/xOy2IvfsvCmz904ZgcB5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
467f0bc5bab4fc14ee09d2dc99bb082a_JaffaCakes118

Files

467f0bc5bab4fc14ee09d2dc99bb082a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

0
Size: - Virtual size: 192KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1
Size: 148KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE