d014abbc0fd61b90186b739cebdc13e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d014abbc0fd61b90186b739cebdc13e0_JaffaCakes118
Size

71KB
MD5

d014abbc0fd61b90186b739cebdc13e0
SHA1

de967793dc1c0f743d2407699bb961780ff1bf23
SHA256

9dc62556768101156b8c4660b205c8eb13225998b6c45f97c3d5dbf9fcf9cdcd
SHA512

a1379dcfdaa2b1b44480e3a553b50c0f0feb665aec14f18471b8d3b4b112147936eb49e2aa3f5297bdda5a12846a6844069c7e0f944b741a457a835d2ca406c3
SSDEEP

1536:C9scXmgv4+TliBW2lNM7cCfyv78EnvF/beFShXT4Hds:C9s+PTIRlq7cCfyv4ExBV4HS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d014abbc0fd61b90186b739cebdc13e0_JaffaCakes118

Files

d014abbc0fd61b90186b739cebdc13e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.conf
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 512.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ