d1db812ed9289ead42bcd93632a9536e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1db812ed9289ead42bcd93632a9536e_JaffaCakes118
Size

37KB
MD5

d1db812ed9289ead42bcd93632a9536e
SHA1

546deaea2a6cd9c74830ff8fa851ef6b2352db56
SHA256

1496bc12880a3ac9333bb2d148f75bbe4bc629ce5e1d6b77403a16344746ae01
SHA512

0d5fe6009d7b46840419f1c3e1d4907186604476c2f4b0503282e2626f60d11c2144aada140491b783319ae5129519f7d1c14b72b688504492457a7effb67a74
SSDEEP

768:EugMx/f0ZHrjGsf2Vk8Clk/NhLo2D42E6tEDdyTykrVhGWZKE:Eu10ZHWsykllqzs2/E6tnT5rV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1db812ed9289ead42bcd93632a9536e_JaffaCakes118

Files

d1db812ed9289ead42bcd93632a9536e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9150b42b01479748d622239befa87e41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
GlobalAlloc
VirtualProtect

user32

GetSystemMetrics

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 222B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ