c1fefa9f080795fcc37d19a63f2221f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1fefa9f080795fcc37d19a63f2221f9_JaffaCakes118
Size

436KB
MD5

c1fefa9f080795fcc37d19a63f2221f9
SHA1

afc65afcd015ed6fd5cf9c62dfc98e59ccdab06e
SHA256

9224c3582a5e2bd8dad3e1683a1f97b37971a5616ac3ca5ad0287777da954fcf
SHA512

116e72414bc2c555ac6deea37a72d38a7bc5697238950ca03262ce219dd98121a8c2e07a0a7a22d7fd737a2d67c1bea7dd906a9549f0b0e6cad08b0a8026bb0c
SSDEEP

1536:SWkjSpd49XQQzDMCiAHO9CwxlOOT2iXAOTqOTSHpx9Z49IM0Vte+O7Bkgkq7xu8Y:iGzCY9xFKiXNbCZIIvCkgVxf0R4PI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1fefa9f080795fcc37d19a63f2221f9_JaffaCakes118

Files

c1fefa9f080795fcc37d19a63f2221f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.scpack
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 288KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ