a5b427bde2d21dc9814d1d634ac93f7a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5b427bde2d21dc9814d1d634ac93f7a_JaffaCakes118
Size

14KB
MD5

a5b427bde2d21dc9814d1d634ac93f7a
SHA1

29572603cca4088785aa7240e6343184b5903b0c
SHA256

90aaa90867ddf628df036f5c7936ba69b9406c71ecee97be56ae5926ab1f99af
SHA512

cd1c73707f1c582ba96885a353d8e05516a50b8b6abd73eb67ff5fd9e1ab384af81ad578b2394c80be976950e9a7a5da2ee9250d7735b3fc1599f1c65248df25
SSDEEP

192:qcvv7w0WlQ9STriFaXkJJLMvRiNCidF4bYR2T3EEWrwU97Ymhjmf6v:qmv2lmSTriFaUJTxlR2TarwU97Hh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5b427bde2d21dc9814d1d634ac93f7a_JaffaCakes118

Files

a5b427bde2d21dc9814d1d634ac93f7a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 6KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE