742a4bfc659827e6b48d89b739028fa1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

742a4bfc659827e6b48d89b739028fa1_JaffaCakes118
Size

21KB
MD5

742a4bfc659827e6b48d89b739028fa1
SHA1

4ed2d4df4f6d2aad78d2a21b8552c9da05717e99
SHA256

28b7e1b8966cd4b0bbbef5bb069a61e8b4631b5cf0493008486fabb8b1a11d6d
SHA512

6c977c08a28e470204011e811b54f32f8115555894ec44430f2021eec58ce7e958194023c5f3d2171c34e0ad94de88134b9095091bf8bdc2603d7db8dcd71ee1
SSDEEP

384:u+7Igrqx+f7+6//RCqcmO+9bMFPqLKfNeVxDdsbWnfpUCNVDg4NVcCUvW2X:uUA+DN/IqcX+CPqesfdsbWqCM4Nie

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
742a4bfc659827e6b48d89b739028fa1_JaffaCakes118

Files

742a4bfc659827e6b48d89b739028fa1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Nsp0
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Nsp1
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Nsp2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ