c90ed4c8d1002f0a0be30d423227ea55_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c90ed4c8d1002f0a0be30d423227ea55_JaffaCakes118
Size

394KB
MD5

c90ed4c8d1002f0a0be30d423227ea55
SHA1

c396efe6b079e257db4a6478cbee3b8e09b37f27
SHA256

d3b557058a21a73f6627d66f21eca1067770545d71b399552f23adbd4749dd06
SHA512

d9e167b855699356950946baea464565b246f90457f78bdb316a92b458d2b5fc100d25ceda91c0d51248684b4a1a2907a94d2f785420419639e74fbac3957408
SSDEEP

12288:jLbZ4B+cdJc1nSg3/K4sQm1Tsx0lyDXAGFi:7ZuM1nh/K4lmK4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c90ed4c8d1002f0a0be30d423227ea55_JaffaCakes118

Files

c90ed4c8d1002f0a0be30d423227ea55_JaffaCakes118
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 383KB - Virtual size: 548KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE