b05541171e98fab228ea2591883f3306_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b05541171e98fab228ea2591883f3306_JaffaCakes118
Size

376KB
MD5

b05541171e98fab228ea2591883f3306
SHA1

38abfe112619f0a1b9dfc7a5d34bf96b9c32d5e9
SHA256

ad44f2b45dab4bcc91d7d7b24394ba6348d2f8e19f85ba12eea244f2bc658aae
SHA512

00b9b165a62a82f0df50badcd68d3391144a33c168bdcc3a9403e51848c9e8be8ffc948d1ab45af59b888ece6d3cbf52a12658b8a5ecc0fcfdea27ebe77a2456
SSDEEP

6144:PpAM8w2jdfzXxTSAjE680PKOg5woPihs32JOQ1F4KzX83asN3/zUZCFVz0PshHoY:uw2R7QeE680mwoqhcsj1XzX6pdrtYPKp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b05541171e98fab228ea2591883f3306_JaffaCakes118

Files

b05541171e98fab228ea2591883f3306_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.naked1
Size: - Virtual size: 732KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.naked2
Size: 371KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ