83bd36b7a0f0351e730d1774684b8e04_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83bd36b7a0f0351e730d1774684b8e04_JaffaCakes118
Size

12KB
MD5

83bd36b7a0f0351e730d1774684b8e04
SHA1

ce8b0ef72abbd905da858ba7ff54edb0d674fea2
SHA256

81e3ecf9772cf402170d5bc0456a164c1aea83a4c23a8d3f9afeea175be7fe14
SHA512

d24fa96d16b5800ff6958d3eaa02f8150db6e6a8585390939024f6d01adec0deb10e67481a5d713758cffc014bd72bd75a5625887f1bb4bed460ee778f269801
SSDEEP

192:nZ87eIoaOegrqxNQuc4R6Zrch7hBNHwVWF9s:W7e8grqxNtjIZrch7hBBg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83bd36b7a0f0351e730d1774684b8e04_JaffaCakes118

Files

83bd36b7a0f0351e730d1774684b8e04_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.naked1
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.naked2
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hnxyy
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE