bf4649cf8523aa22390a05d84b65a393_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf4649cf8523aa22390a05d84b65a393_JaffaCakes118
Size

17KB
MD5

bf4649cf8523aa22390a05d84b65a393
SHA1

7a4336819ddc1e4ec460c852fdc83919010bb95f
SHA256

afd4066405aec2da070037fb26bc99f80cec51650289673768bb90471a0b94ac
SHA512

84cbf198b063e885a08a24800634b7274b861537af4781c15b0c25a94177db01e65c9b17340745f8e9f90cfc7a0f11652fe87c43fb4d5943e9df08d540c8e6fa
SSDEEP

384:le/1QFmP+/lTVxEqv62GlwugEbFiQXq2Mm90ZeHJAvR:xIqvpGlwebFR9tCoJAJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf4649cf8523aa22390a05d84b65a393_JaffaCakes118

Files

bf4649cf8523aa22390a05d84b65a393_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 10KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE