6245f2344864418e90eab25a90ab7a90_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6245f2344864418e90eab25a90ab7a90_JaffaCakes118
Size

192KB
MD5

6245f2344864418e90eab25a90ab7a90
SHA1

68ece8fb867ef98dd77c5c8647ad62933e1c2a63
SHA256

f43672716a36b5b7b95a00882f2ecb73d6227b0174c31c51c21b58881aa7aaef
SHA512

c56844efbcf7d52f9407785a5376a3a32cd2bf9aa183e93ed977cffa1c46a1fce9a59863c2c60095c86ea27bc0f6582c2bfd745c2bb3edd30a595a83c72379ca
SSDEEP

3072:UmR+jmTrkhl9ifK+qHFJTx7mwncFnRarhoVmqEk0enAo+jY5dOG0ea6MoQ1p:UGxTKJ9BiownRzVeeAo2Y/DaNo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6245f2344864418e90eab25a90ab7a90_JaffaCakes118

Files

6245f2344864418e90eab25a90ab7a90_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

CODE
Size: 186KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE