d0974cf93eba1c0a8fceb33d45ea79e3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0974cf93eba1c0a8fceb33d45ea79e3_JaffaCakes118
Size

60KB
MD5

d0974cf93eba1c0a8fceb33d45ea79e3
SHA1

a87bde16bd665eacfe7d276ad6747296f58ebd15
SHA256

17aab1da6fb7f05acdd9eacbec2e1a5423b7168358020ef393d56cad2d7b8584
SHA512

d39011f8555e2c0fd95bff6714eba55d99489ea7aa5b4c7f3c3e870e3ef1476a207b3bd7a2d295bb403cb12ba191ca0788b951693839f5cd5cc07ba5c0d2dcb5
SSDEEP

768:WvMHQDmN6GD85DpZQFgLHo4EK0/mqkoWfW4vEn2Jjw1SE:WvMwDJGo5DYQ0/jWfTEnyjw0E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0974cf93eba1c0a8fceb33d45ea79e3_JaffaCakes118

Files

d0974cf93eba1c0a8fceb33d45ea79e3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

148bf55ceb3e5471ef5f9ffc2bb75e2f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
VirtualProtect

Sections

.text
Size: 28KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XComp
Size: 724B - Virtual size: 724B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE