7282ed62f0ba675b634c164cf3a6fb32_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7282ed62f0ba675b634c164cf3a6fb32_JaffaCakes118
Size

96KB
MD5

7282ed62f0ba675b634c164cf3a6fb32
SHA1

c168ae5555883f9abbe1d9e4c179ca151e30ec18
SHA256

023a8d648cc097e061973032f2e0a17047b92a0c6555e806a066a845d83fee04
SHA512

15382db721a6a57ee127ba338e3a7eeda6ad00ca4678ac7a2124b3e391eb38f4f1bdf64eabb4349c28a2fb812ee707925f0f9040968eeea7174088b87c35e0aa
SSDEEP

1536:HJ70XDH0o8kcZ8FSsD6Fa8IvpsfzGnVcwZwq8rQTKPGI9VeEaMfzRqxtE2:YQkcZ8Zv8Ivps87+q/2poydsE2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7282ed62f0ba675b634c164cf3a6fb32_JaffaCakes118

Files

7282ed62f0ba675b634c164cf3a6fb32_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 88KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE