89e14f227ec39d361ab15222d665dc60_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89e14f227ec39d361ab15222d665dc60_JaffaCakes118
Size

16KB
MD5

89e14f227ec39d361ab15222d665dc60
SHA1

5aa91f56fcd11a4260fcf6743acb480cb6939ae5
SHA256

a42092a743e448b8aca94d3eecaf36234fab41b35f1c2ee1fd05acf57d6f1eb5
SHA512

85788a197a689a7984eb693ee34b68e8e49a7cbbd466deef314b5dc4a11a5687daa203743e4fab5ddb5f4568667b0f0fa67735250b2e1a8f0c2a7170d9d742b6
SSDEEP

192:nxF/UgxAD2yZtmhnKVKFekqVYXV06IwjEPzdewtyY1TFIyUQllLsYXvbBdniAb8d:eZ8KVBPEpIDL5yaFMQLsYXfXbqtTuK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89e14f227ec39d361ab15222d665dc60_JaffaCakes118

Files

89e14f227ec39d361ab15222d665dc60_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

CODE
Size: 12KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

n-code
Size: 121B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ