c987c9d06e8d15b4b82304b74ec3a931_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c987c9d06e8d15b4b82304b74ec3a931_JaffaCakes118
Size

124KB
MD5

c987c9d06e8d15b4b82304b74ec3a931
SHA1

240b800fc751fdc3b6e9356a8a66319cdd33046d
SHA256

3afd8c6cbded81128b66dc452d9afed000c7949ce1f322d043b16a507cb9c027
SHA512

0d61f41544acb3c92d3ea00edff9c1548fc3ce4e931adc757fbfa90cd07aca822be2257f823a01ea33318370597e1243c2d347b63938df689554cd022a9d7ae2
SSDEEP

3072:q49J/CCre4U5GCCHnievKE5fiYjyfOznI9varD9R:q4DtUVC/EdVAr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c987c9d06e8d15b4b82304b74ec3a931_JaffaCakes118

Files

c987c9d06e8d15b4b82304b74ec3a931_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 77KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE