d0417d1a9386535a5895f5a9bc6d8536_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0417d1a9386535a5895f5a9bc6d8536_JaffaCakes118
Size

144KB
MD5

d0417d1a9386535a5895f5a9bc6d8536
SHA1

0f6fbee8c64f28f323bb0ac2c3c7967bbf33946b
SHA256

9856d1c6e6447e8bf86e5375a2627d497957a99e81213da905c502dca2f54376
SHA512

f853c15bebeb78476102de7bd09e256aa850279027b660f8d8f72cdec50fd41b523cb78087f66cd461da2b548c5b3fbda6d806444b469c0b58479d1ecf8bf320
SSDEEP

3072:RFWyHnLZ8RErAE9tAnG7IUYvTzV81xR5Ef24Irdj9br2YMxV0G:RPuSsKAnG39Rye5rbA1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0417d1a9386535a5895f5a9bc6d8536_JaffaCakes118

Files

d0417d1a9386535a5895f5a9bc6d8536_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

0
Size: - Virtual size: 212KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1
Size: 138KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE