d083f6694c41b2e5b85c0535ee14e253_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d083f6694c41b2e5b85c0535ee14e253_JaffaCakes118
Size

312KB
MD5

d083f6694c41b2e5b85c0535ee14e253
SHA1

afb210db036e1389505444e9ef9bfa1d1e4044f2
SHA256

54bd48c0c72fdb8c84655ac2615798595fce8dc0f2812577b4308445c307601a
SHA512

2b77e51d49e3f4bb2c33fd3b7d52826fc3911f19004028dd8cbf08dfc66f7a554cd20e7a369b14204a119c2c4abd93ceb98929eaae51029b4898c437b38921c6
SSDEEP

6144:wqTaMhkope+ON6l40zs6nkC7u7eGTk2j1OB6EsOtL6Z2JhR9zn:wqTnbvxKKs6r8rxO4EvOZ2JhR9zn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d083f6694c41b2e5b85c0535ee14e253_JaffaCakes118

Files

d083f6694c41b2e5b85c0535ee14e253_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.naked1
Size: - Virtual size: 756KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.naked2
Size: 306KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ