bd123ddbbb68b0b2ac01382229245043_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd123ddbbb68b0b2ac01382229245043_JaffaCakes118
Size

423KB
MD5

bd123ddbbb68b0b2ac01382229245043
SHA1

c79641656a94ae07a071919b285896b3afc9679d
SHA256

63aa04c0a83159b79ef36d9fd232a1ca3ba8fe94b2c48e13b4ba4d053c76b9b8
SHA512

71d3d9084816ebcd119aeb95319545a8faefb3b866562610fb795d232dd54131ae966cc50dd2c5b83e0a8a18d8dd96afcf9471d3b4e2a43cd53d169e9e6fe8f8
SSDEEP

6144:JxY0nYy7ZaE5pxbkaqECqCzjV3yMhkQqgoMAh6DuwV3ZhSH:80nYGAEfdkaclhkQvFbuwZh4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd123ddbbb68b0b2ac01382229245043_JaffaCakes118

Files

bd123ddbbb68b0b2ac01382229245043_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

CODE
Size: 220KB - Virtual size: 804KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 201KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE