a033cc7ba48d5604ea3eb7e939621657_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a033cc7ba48d5604ea3eb7e939621657_JaffaCakes118
Size

48KB
MD5

a033cc7ba48d5604ea3eb7e939621657
SHA1

01478ddd19d459f12e58313c5fbd4147c2ef901a
SHA256

024f90edd5195cbc763e90fc18933a2ef4a96ddf2e50ce332bcca35cc6ca0420
SHA512

877cb083a88cf04ec7279ca8f6b947b8dff2ab6bcc0ab7b52781e5c6496c050718f9da0d1ed1f36d8d799a20dc4db847b7303920991296cde819d85a57e78ccf
SSDEEP

768:xHzz+OlZP7+CbtL6icA5e9WM44tJ7QSFmMI+bMI+OxesEeWjGijlcPCvT:xHX+Y7+CbtL6IQLOMI+bMI+OoswOPCvT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a033cc7ba48d5604ea3eb7e939621657_JaffaCakes118

Files

a033cc7ba48d5604ea3eb7e939621657_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ea273ed216749e855b827434225b4591

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
VirtualAlloc
OutputDebugStringA

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.plugins
Size: 4KB - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE