c01b0160687c3c3b27ca68633ff07bbf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c01b0160687c3c3b27ca68633ff07bbf_JaffaCakes118
Size

31KB
MD5

c01b0160687c3c3b27ca68633ff07bbf
SHA1

9916a71279d82ca7f172c9ac1ec88df0a132bf44
SHA256

71cc58057fa8a51f632bbc36651f2c20a7d76aa5d985f25e2925ae6ca424e7c3
SHA512

a1bd8bc4d3f2c180a38b4b4129d8f141e25bec4d0fc23fb5c218a98cb47691b937d282d7119e8f515fbd57a9782938c35c24a3e31848e5021e8eb1bd4008da15
SSDEEP

768:aYByPTYY5BNAF020LeeqtT4BDdwvuYF0F:rAvBc02V8bwvuY6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c01b0160687c3c3b27ca68633ff07bbf_JaffaCakes118

Files

c01b0160687c3c3b27ca68633ff07bbf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5e4a2095a7178e595a027ee41b9647b3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
lstrlenA
GlobalAlloc

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE