d03d74282c4ae7d3a29c94b3cb45ac24_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d03d74282c4ae7d3a29c94b3cb45ac24_JaffaCakes118
Size

307KB
MD5

d03d74282c4ae7d3a29c94b3cb45ac24
SHA1

febe78ebc551b00cb35759a89476821be496b734
SHA256

d4658c7f72b67c5617f02154ed924c6f6a1099f15184e7bbc2edf1459c1e831c
SHA512

a1af071e5abe78682462294051ef9ebe6d7910ab5f5f147ac39b9bbe1db3457bf456ec5190e839580a17eedd77c73796b70b1fcc7839553bce4f9457d427d309
SSDEEP

6144:BD0h089h3oWGr4bUqFq7JInscCkjI1nYixmroRcPira:Q9h3oHra46nscJM1nYpoRbra

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d03d74282c4ae7d3a29c94b3cb45ac24_JaffaCakes118

Files

d03d74282c4ae7d3a29c94b3cb45ac24_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2717a120f3532759192746b08a75beea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
VirtualAlloc
VirtualFree
VirtualProtect
LoadLibraryA
GetProcAddress
CreateFileA
WriteFile
GetEnvironmentVariableW

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 231KB - Virtual size: 231KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE