c82213d42495ff2fac4c81da1aeb817e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c82213d42495ff2fac4c81da1aeb817e_JaffaCakes118
Size

67KB
MD5

c82213d42495ff2fac4c81da1aeb817e
SHA1

503dd053983157f922d98efe1a40de673e98d280
SHA256

faf71f7da957c9b1a56b37ffeb342b7c8727e5ac94b4c7005a9a5cb5317c3c82
SHA512

8757b51de69c817222d7ea0dc5c21b1317d17eaa6024f2fe631b3c466ff18f050bc25d69c484165e722e11aaaa93a42569b88625b7edeaac5942380a42a1d6c0
SSDEEP

768:CEBt4mR/01IyzJAFdmvNTYeEK176nZZihk1DC+TEAzlOuYlHE2ir+lk:C+4mR/01IpFANTJ1mn/fIAz4HE2A+S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c82213d42495ff2fac4c81da1aeb817e_JaffaCakes118

Files

c82213d42495ff2fac4c81da1aeb817e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 47KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE