85ceedadfea39307e0febe4e10e4fdc2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85ceedadfea39307e0febe4e10e4fdc2_JaffaCakes118
Size

301KB
MD5

85ceedadfea39307e0febe4e10e4fdc2
SHA1

2e0aac0292edd4414b5b6c243ce73a9798ad54a3
SHA256

56812bf2c50c54c3b6afd253d2bff2c9f6c94e0b273bb1676d80e8dd790959f6
SHA512

44b9e38c3abd7fa8bf0c9b49718a1841211b0365700f2fe8e84d02a9e8edf237fe6e9f9f6cfc03f2c77ae43a8f44fa7e116daa6e49544ccced8cb7030e19ddf0
SSDEEP

6144:cfgpnTfV/4RJXkcNT43KS3KD5pJi7NVEMbOM0lcHUfh5C6Kge5E5K:1lJkh43Y5i0nlcHUJMH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85ceedadfea39307e0febe4e10e4fdc2_JaffaCakes118

Files

85ceedadfea39307e0febe4e10e4fdc2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3fb863511ecb4e025ef3c40c2a305caa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvbvm60

ord517

Sections

.text
Size: 296KB - Virtual size: 580KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lRoMUjK0
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ