7217374ea1ebc5009a2336132cc7b660_JaffaCakes118 | Triage

Sharing

General

Target

7217374ea1ebc5009a2336132cc7b660_JaffaCakes118
Size

86KB
MD5

7217374ea1ebc5009a2336132cc7b660
SHA1

f17053c606a440a52daca78beaeb1895c0b1fd53
SHA256

55e4fb23f95ed9cd5aa20869fef09f572a0935ae56a22280e0394cc8c609ac8b
SHA512

90256a83de7d673a2552419cc33eb1ba78ee1dd26b7a382921e13997838e3f3c84867beba72545de67e3c621074749383923437810105b8356dd50b61238f43a
SSDEEP

1536:ZRn0lef5skjJoK1fFxOsmKr+V870LbUb7ixBMpxHka6wJsfTjSAy9bdKX:ZRn0lfkCKJOsm3XLA3fkadJsjPX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7217374ea1ebc5009a2336132cc7b660_JaffaCakes118

Files

7217374ea1ebc5009a2336132cc7b660_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a553a1fe3d868f06698d1f7bf0150374

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
VirtualAlloc
GetProcAddress
lstrlenA
lstrcmpA

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ