87ad54a5d5ba04fabad2397f0b93991f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87ad54a5d5ba04fabad2397f0b93991f_JaffaCakes118
Size

22KB
MD5

87ad54a5d5ba04fabad2397f0b93991f
SHA1

2899a8edc9e94515143dc68556d493e53f13752c
SHA256

524d5e5afbadc6804e7742ebf558ddcfbc02581bc4ba1b024a6f1ab381eb05e2
SHA512

7bccf6bd3934404c1fce5f92db86bea1133ea4af7f5cf8fada0430b8f092030ecca5083b67677f143f8b516dfe7ea98af640a135d6774b3e5d9ddcb7cc59f2c8
SSDEEP

384:8EX6WS4mWB6wkDNCA4mw0ULVFBdalOJkvsP58eNTY9+dK/:9THckPBLVFDcy58eNMod

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87ad54a5d5ba04fabad2397f0b93991f_JaffaCakes118

Files

87ad54a5d5ba04fabad2397f0b93991f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3396b0171a742cce3a4a1a20d20dc603

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rtutils

TraceDumpExA

ntdll

NtAllocateVirtualMemory
RtlAdjustPrivilege
RtlAddAccessAllowedObjectAce
NtRequestPort

kernel32

FormatMessageW
GetLastError

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE