83ef2e2c12ebb859b62e62af4474640a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83ef2e2c12ebb859b62e62af4474640a_JaffaCakes118
Size

130KB
MD5

83ef2e2c12ebb859b62e62af4474640a
SHA1

edf01809e7d21d3fd74af0a9acc035d2eb70ac2f
SHA256

6b3712cd1ae5eb86e7bc03b0cf5d96c7d348da7eee835ae8f4f99cde7273d238
SHA512

477e341a27f31c697795d92b79c64142e724fbefb01d1b258f9f7ebfea0963e0e3aef600fd00370880a02059d9dab271984134ecf25c46bf7b0ea1910d04eb83
SSDEEP

3072:34k0jb5UF4XKgmACi52ULqgzmhSKZtQZ/u2DK8UDzB9/Xk518iZdnpH:3cHygzGimYKZts/htUbU5Gu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83ef2e2c12ebb859b62e62af4474640a_JaffaCakes118

Files

83ef2e2c12ebb859b62e62af4474640a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

CODE
Size: 124KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE