61023992049b0560f449bc05885f3ef3_JaffaCakes118 | Triage

Sharing

General

Target

61023992049b0560f449bc05885f3ef3_JaffaCakes118
Size

92KB
MD5

61023992049b0560f449bc05885f3ef3
SHA1

2a0f12f2e9eb5048d56f2e7e75a9d4d7f6edffe3
SHA256

1cc99efabf3bf5e380f7eb38953c90b9d3234775bfa2cc707cd483011209dfd5
SHA512

df3a0bb0fd433c4b6fd78f32ef8fcade7377a0c5551e16d7356547bfbfa5698a3bafcabd2e7170c7babcd573b73652535ab3ced479a8323da1b493f7d9c5d930
SSDEEP

1536:B+J8hsY8hEbOoA1PzZN2ZhrxA6oeHxQ67qsebyIs7CLgsd4yfTV43xpO3qV88NFM:B+J8hkhECb1LZ4VRoe6bECaQVOO3qV8v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61023992049b0560f449bc05885f3ef3_JaffaCakes118

Files

61023992049b0560f449bc05885f3ef3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

37d5dc39de20bb5f92c98fb970b9306f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpA
lstrlenA
LoadLibraryA
VirtualAlloc
GetProcAddress

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ