704d9d8003fb7b8012d64e08a5bc45e6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

704d9d8003fb7b8012d64e08a5bc45e6_JaffaCakes118
Size

162KB
MD5

704d9d8003fb7b8012d64e08a5bc45e6
SHA1

c4f373efb7a1bec3244c33e8a34aacd1a4c0c06c
SHA256

3b15479ad2753b456897e422199a8d7b2f2c7630c54a74e7201ccb13f6b04d26
SHA512

12cd22650ab01b1d4474b1f2275315521fb790d001ac831a2933bf4a0bc36c9e8d573340d836e4c9d2244f688603207045452296ca7fb3b064ff7390d23e7f48
SSDEEP

3072:UjtFuNX/8DsdmALsbq/ZLWpZ37idiQszzsIMW2dX8kyRtoigbZb+P8SbSW8:UjrWLsiZL0ZL/Tc3587RtRgbE8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
704d9d8003fb7b8012d64e08a5bc45e6_JaffaCakes118

Files

704d9d8003fb7b8012d64e08a5bc45e6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

0
Size: - Virtual size: 192KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1
Size: 145KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE