85e15d023d1354d6b053f36a66e45535_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85e15d023d1354d6b053f36a66e45535_JaffaCakes118
Size

248KB
MD5

85e15d023d1354d6b053f36a66e45535
SHA1

ae1107e7ce72dc542aeee37cfc3410ebe24377c6
SHA256

8d0fc1013fb09d0014647cb6037db030d8fa1b2894faa6be99902d28b5681659
SHA512

1a9b360fc8ab6453a5b5bbc926328b770d38ba45a6b3d69565064d005d543e0669197821ef7f2a24e75ad688a223c635a6929cbc2c68ecf5bba5e82568a6901c
SSDEEP

6144:cuol78xDCjWBKA6eP+t3NwwBZjaY2qfXKOV+UWhlpake/:QWRCqKA6eWdvuqfXKBjAp/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85e15d023d1354d6b053f36a66e45535_JaffaCakes118

Files

85e15d023d1354d6b053f36a66e45535_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

0
Size: - Virtual size: 452KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1
Size: 193KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE