8dd601f1cdd7a54ef00b410c3f84bbd8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8dd601f1cdd7a54ef00b410c3f84bbd8_JaffaCakes118
Size

33KB
MD5

8dd601f1cdd7a54ef00b410c3f84bbd8
SHA1

21187f7306791cb561754557cc29761d2ff90a5a
SHA256

d5c76815148de72632bce27dcb0210a444037798283b14244f2599cdde6bd9cc
SHA512

bb5354e2439bdada3511bd42b616a9be2527fcfbf1b493c992f1ca7b29007f9798948a960e3d9afd0694571fbcde65727acb0ff260b293760a1553126b1c94c0
SSDEEP

768:B4URzUjUI/znSxATOj21M8kMKfpp3Rs4pp:iURzW/uqTs8kpRRs4v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8dd601f1cdd7a54ef00b410c3f84bbd8_JaffaCakes118

Files

8dd601f1cdd7a54ef00b410c3f84bbd8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 23KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE