789da02de70376bc7098b580ba9c50be_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

789da02de70376bc7098b580ba9c50be_JaffaCakes118
Size

27KB
MD5

789da02de70376bc7098b580ba9c50be
SHA1

64e8d40fd4ebb4b3d29f2cd64d434ba4be344461
SHA256

719726dfb71783c295d09ddabbd5b29429d38217a79a334828b39965b702c424
SHA512

3cc0f6fdc37bbe5a279802ada6296d9e06441335d67955a166c6f879636136f95d9595f0a37f609580538f51f7d119a9765df1348859a8424a1f9b59c8ca40bf
SSDEEP

768:hVOkX2nKUNvbf31lvM2CRnRtODvC2pJWnOy:hgwKtvbfllvMFn2Ty

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
789da02de70376bc7098b580ba9c50be_JaffaCakes118

Files

789da02de70376bc7098b580ba9c50be_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2c35ed123bf7fb5532653325910c7a41

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualAlloc
VirtualFree

Sections

CODE
Size: 17KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MaskPE
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.llydd
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE