d1f14fea0775dc795d1d8c5adb6e58a9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1f14fea0775dc795d1d8c5adb6e58a9_JaffaCakes118
Size

40KB
MD5

d1f14fea0775dc795d1d8c5adb6e58a9
SHA1

e30b9f1c1b19b50b89a10591366edc5d9ccd0d1c
SHA256

b6ed205233c8763925a6fdeea7c0618263a990c4a4964afe9128a85e3f8daad6
SHA512

c9e5be457017aad19e3d46e3f3188d8eec23c4dacbb15152336d96ac95368ed31cc2d0f1c726c53bd9dc39012ac32c84446d9b87a3ee5e9c1641634b23cdd16a
SSDEEP

768:B64eOLeOLtUNV0GKFksAO1nZS0in80FIJagI6ye8qo7TI:IoHRZGupho0a5I5IPqo7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1f14fea0775dc795d1d8c5adb6e58a9_JaffaCakes118

Files

d1f14fea0775dc795d1d8c5adb6e58a9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5d0809aeb2b3ef42aa2bf117c2a9d90d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
WriteFile
CloseHandle
CreateFileA
DeleteFileA
ExitProcess
FindResourceA
GetProcAddress
LoadLibraryA
LoadResource
SizeofResource
VirtualProtect

Sections

.text
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 354B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ