c7f61d1b90c0af9a463a4fc86deb595b_JaffaCakes118 | Triage

Sharing

General

Target

c7f61d1b90c0af9a463a4fc86deb595b_JaffaCakes118
Size

74KB
MD5

c7f61d1b90c0af9a463a4fc86deb595b
SHA1

e9899e01be8be90b80129a178e58890d40bab05c
SHA256

13b7c970ec931b550332e16103f9b610e5a6dcd79ea484f578794df94789ca69
SHA512

42f98b8198a2f4e1956323de13bd89fda33f63f3ae5e66d46b6448b0fb6128a0bea5e846b9b2e0bcc6357056cbaaa5254ac32eb21d490cd98af42b6c21049fcf
SSDEEP

768:OJMCrjMZmiWbIDDIuk/2q66dGqbz5jIpvDR9NC2So/oOjdnFPr6fyHI6Xt+n0SDt:O8ts/h6zSobif0WfxIgkeFb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7f61d1b90c0af9a463a4fc86deb595b_JaffaCakes118

Files

c7f61d1b90c0af9a463a4fc86deb595b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d76f4237a8ae158292f09835997a1d9f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA

Sections

.text
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.conf
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

bcxfqr18
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ndi.kojc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ