b810c70b181c8dc8ad2c198b65cbb144_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b810c70b181c8dc8ad2c198b65cbb144_JaffaCakes118
Size

2.3MB
MD5

b810c70b181c8dc8ad2c198b65cbb144
SHA1

f06656a8bdf1d18dc5136afa9b7244d18042a04b
SHA256

53c943a5109fb26a1d270d55c611db6b43776ae7d3ebfd84fa61c1df9bc7c289
SHA512

1449e459e87d7a28dfa881d63d50b2ef2555f1a69f7b5e6f9621b8d2793b44e4010d9d771db3c9b6bbf57b4787e7027e2f663ed1204d0915aced9276d3f037fb
SSDEEP

49152:bPxVkQGGIZVUjqUo/KbEsIvlFiRR9T0H+vIqWGNI+zkHj3Brk:bPxeQcDfUi8ZIviRR9TFIgI+zkLBrk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b810c70b181c8dc8ad2c198b65cbb144_JaffaCakes118

Files

b810c70b181c8dc8ad2c198b65cbb144_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8fd82e8d3bb8eb9dccfdbf29d39d96fc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
ExitProcess
VirtualAlloc
GetProcAddress

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 778B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ