a2646b480a7ace8a660379ab4876a82c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2646b480a7ace8a660379ab4876a82c_JaffaCakes118
Size

295KB
MD5

a2646b480a7ace8a660379ab4876a82c
SHA1

061cc37bee99a8b2cb79ff9c85d2419ba4b73c02
SHA256

676505d59abc6ff55f1f629ad1c45fc6ad432ae150dc4c1c89b1e839d9402661
SHA512

32a6bf2abcb40eccef1e42ee62e07729f5192408db79024334f108d669b945f4ed195b43137df6263c4a7ebb258b24f1928adea85e1cb99d9a638b8fe8448c9f
SSDEEP

6144:PG3RzKGXif+Vu48NnjzlkZUJ6yNaSAhuz0PAVnYR8RaETSej:PG3R48uvZkZU4h8aGS8RaE22

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2646b480a7ace8a660379ab4876a82c_JaffaCakes118

Files

a2646b480a7ace8a660379ab4876a82c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2c35ed123bf7fb5532653325910c7a41

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualAlloc
VirtualFree

Sections

CODE
Size: 275KB - Virtual size: 536KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.llydd
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ