9553dd1fe03e2acfecc6e30be1410ec8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9553dd1fe03e2acfecc6e30be1410ec8_JaffaCakes118
Size

64KB
MD5

9553dd1fe03e2acfecc6e30be1410ec8
SHA1

e28c67ae832da0b1527ee859594b6165b16a4dad
SHA256

92e219796305102bf1180824dc350071a0442e9e13c8b7170a31d93ba75fd89c
SHA512

ea5e2d78f56f5fc6dea015e210c7058eddb57e4a9d37177dfa4d8cec1e60f71845c20c5ade2995eac89a01aea6a128e53a3e4555d45fe136970d5e452bdbf18f
SSDEEP

1536:sQKV1MyVckOG12TGX1HxwjkVnDhI+HOJ+Y:s7EGBX1RCkVnDhIAk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9553dd1fe03e2acfecc6e30be1410ec8_JaffaCakes118

Files

9553dd1fe03e2acfecc6e30be1410ec8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 44KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE