5ca07749240b0d32bde1df364064b07b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ca07749240b0d32bde1df364064b07b_JaffaCakes118
Size

509KB
MD5

5ca07749240b0d32bde1df364064b07b
SHA1

12c44a09d8f8d146f54d16942236ea36be4c8568
SHA256

44bfc6d5133ef26ddd2217e34c94e1c6e2241984535763015a9337fd1d4f421f
SHA512

ffe79834f59360f1aceff23a4b191bbc0b4f3d031bbcc81db5ff6fb1974bff5cb13ba501a043e30b1f8f2557f666864dc7e0cdec228917838c76ce0af74dc8fe
SSDEEP

6144:BNBEpDFRDqMMITyjMDY6ql720UQ+QyTBXgRE:BnOhRDqZeUMDY6qlHUDX1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ca07749240b0d32bde1df364064b07b_JaffaCakes118

Files

5ca07749240b0d32bde1df364064b07b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 364KB - Virtual size: 364KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

8xuqqsno
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dodvnxo.
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

8ieqbwd5
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ