889b3e2c0129ea293227f07e020cae11_JaffaCakes118 | Triage

Sharing

General

Target

889b3e2c0129ea293227f07e020cae11_JaffaCakes118
Size

35KB
MD5

889b3e2c0129ea293227f07e020cae11
SHA1

193964881a3b03c6acdabca40c497287aad8369d
SHA256

1cb4da7455af5db229871851f7e200f850d0731919f24ba46d016d790134425e
SHA512

b9189cd88b0cfaca0e0c8232f2cd98fcc8d5c966301841029c5b10f861c283dd55bb639f641ca96b674f04835e320361a829bd1d9cf5c026eceb0134f00140e7
SSDEEP

768:6U5PPwVow7GMhFpksqexYeIKoDtBgceBDb6A7Kr:v5PPwF7GMhcsAJT2cg3ru

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
889b3e2c0129ea293227f07e020cae11_JaffaCakes118

Files

889b3e2c0129ea293227f07e020cae11_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.bss
Size: - Virtual size: 56B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 30KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE