66dc8faa16d0ad27b0949a0183efcece_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66dc8faa16d0ad27b0949a0183efcece_JaffaCakes118
Size

712KB
MD5

66dc8faa16d0ad27b0949a0183efcece
SHA1

17fea266e27f047f11c2384015dd3214c87f350b
SHA256

6dbad6d52ca4458dc8deb3c3b2efb4d40852e489090a59dbd27a0a85c0ea7417
SHA512

5149895df2a1c9abc4272e541f2e64c4d084c1bf8b3c66d4eb63cc34d5ec9cbefa7a793a822e369c9b087f67e37da4a5763a28995453dc510146531a12a9ffba
SSDEEP

6144:jcNWEyTAIbF64TxkAttgJBnMj8J9rzJWivbh/Mn2BU4cEH3o:REBKc4lkmtuMgJ9rzJ5vbh/Mn2BUw3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66dc8faa16d0ad27b0949a0183efcece_JaffaCakes118

Files

66dc8faa16d0ad27b0949a0183efcece_JaffaCakes118
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 364KB - Virtual size: 364KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fsi6if1o
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zqtodxlj
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xqepdnxz
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ