b72e691b6a8127a963bf4bcd3087b343_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b72e691b6a8127a963bf4bcd3087b343_JaffaCakes118
Size

13KB
MD5

b72e691b6a8127a963bf4bcd3087b343
SHA1

39b1beed1fa0a4dd184429e9b1f59c504fe30b72
SHA256

b577ce2209a3491b056dcbe3a6aa7ff2c100558ed6037c3bf3d87b3d0523e82f
SHA512

0f827e2f2e6c3d590a00587672ed901654340d9ec1214c3e5bb0ce68398a69a6970a352883395d22df272394e0ddde9eed77a423897453e835be517b45fd7031
SSDEEP

384:Nlgn1I4uPAr6KB2AJYg/MCb0pjWXDc5LfwU:bgni4SSJ1ECIpjeQdf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b72e691b6a8127a963bf4bcd3087b343_JaffaCakes118

Files

b72e691b6a8127a963bf4bcd3087b343_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 9KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE