69664a4e1e4958a6177daa929e9f4045_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69664a4e1e4958a6177daa929e9f4045_JaffaCakes118
Size

67KB
MD5

69664a4e1e4958a6177daa929e9f4045
SHA1

6ab35a2623b0614f802af031568299294f0e81a9
SHA256

017e47e7bb5c8f51e3eaa66ce0d326d207c6a0f64d22200b2eaeeb384e1cd94b
SHA512

20566e652178f185ee3a2b6c79fa70c4f745be5001da8d61fefaef61c4c52cc2fef029e447352cb4f3e057b05c16226e695be1ccc538d5f9a27cf8bf45e59c87
SSDEEP

1536:wSr5AITc97cVA2esXoX8C65R8BBDPx5b6HrSfl53lNia/AMnkNl:Z1Tc9422esYX88iHrSfl53lNLzkv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69664a4e1e4958a6177daa929e9f4045_JaffaCakes118

Files

69664a4e1e4958a6177daa929e9f4045_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 15KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.netcryp
Size: 512B - Virtual size: 4KB

.datcryp
Size: 512B - Virtual size: 4KB