b18b48f33cef71bebe28b59f00943672_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b18b48f33cef71bebe28b59f00943672_JaffaCakes118
Size

45KB
MD5

b18b48f33cef71bebe28b59f00943672
SHA1

0fe2f1b841cb4ea7930cd05a89e68971913f6399
SHA256

51eded8de9369fa59a7b477bec7d62d1443ef68349f724f1547043560fe4c9b0
SHA512

33fe24b15589a40c4c6fb55c9aa5cb3fe22341a022470e21d4e7311c69172fbcd4ad4755a1b481e43eb0f18b14be53b9f51fa600259659934cbca4866e38bbae
SSDEEP

384:mHO/Zkdfw14u1kuK9ItjX+mbi1iCe0HL1JjFrClmiv4XVZJq4nd/uBDfM7:EO/ZuGfVOaS2VqL1JBrCl4fJHd/UU7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b18b48f33cef71bebe28b59f00943672_JaffaCakes118

Files

b18b48f33cef71bebe28b59f00943672_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 5KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pebundle
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pebundle
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE