b7253184e62aa4cc235fb684a3f542b5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7253184e62aa4cc235fb684a3f542b5_JaffaCakes118
Size

472KB
MD5

b7253184e62aa4cc235fb684a3f542b5
SHA1

decd774a0414714738f7c197c98bbd7cf37dc1ba
SHA256

1edfa835b29a364a99a128cd51bfa28073306c0df7fa07059931324c86fa04ae
SHA512

568c9dceab8cb8d2f561a6a3420e10797cc25c99ae6541b3b6820434fb3201cff1f89a581fda32698bc0c33ff6c29e4794607f6e01b3ae2392d3307759b60070
SSDEEP

6144:6V72IunIzHnGnc/l+9GOZLYj1SXQkuLOhUNrJBGV26v7ngw:6V/uIzH64+jI1SHuLOh6Bkv7d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7253184e62aa4cc235fb684a3f542b5_JaffaCakes118

Files

b7253184e62aa4cc235fb684a3f542b5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

0
Size: - Virtual size: 696KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1
Size: 181KB - Virtual size: 532KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 291KB - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE