c225c5e45fc9fdaecf2146bec4382fb3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c225c5e45fc9fdaecf2146bec4382fb3_JaffaCakes118
Size

468KB
MD5

c225c5e45fc9fdaecf2146bec4382fb3
SHA1

e0d6c24052dce28a00de9000bf5fb016b3cc86b7
SHA256

19f0761341e6c23e443107ff970d967e2add81e1a4b24eef69a06f09331123d5
SHA512

df9b581d9cc4e6d0dc9b4e7799a28265fdb973bdc3306807a5393ea4996bd265dc10f4409f33c842f78c8565395c1152b6708f40aef649804bff236e373912fc
SSDEEP

6144:XUDVc1zTkMkJ3O3whjUTPeKV2q0bmM/4yR8aCv578XIcdizu5+vMbkpmRlb4zF9H:k2WJ2zYqM/4yR8v57Vc8U+vkkpMXC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c225c5e45fc9fdaecf2146bec4382fb3_JaffaCakes118

Files

c225c5e45fc9fdaecf2146bec4382fb3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

724fd14fef4967d147606e86d54717cf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree

Sections

.data
Size: 343KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ