d44afb2016d1553b4bde3cf638ed7bb2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d44afb2016d1553b4bde3cf638ed7bb2_JaffaCakes118
Size

28KB
MD5

d44afb2016d1553b4bde3cf638ed7bb2
SHA1

36b69e131b2c3ec6282134a3045159e25d38c520
SHA256

3fdb48d3340c5287497356609bfaef53ad087e6ec9332c2eb1163f1c45e56ddb
SHA512

e5966e015fa3ab8133997d519d2fa21dd24e82bbf7fc4b9c6a89ddd2968e06ce661e23dbd90623383780fa3f39480a495938e90442c0b2430779f4ca0efbb76d
SSDEEP

768:cOgniFMMvaTmU80s8Cs0sD6Yyu3yvCplF7vWPY:hgni86870sUqyap/aQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d44afb2016d1553b4bde3cf638ed7bb2_JaffaCakes118

Files

d44afb2016d1553b4bde3cf638ed7bb2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0784560b560219a7b1ec9eab3374f923

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualProtect
GetProcAddress
LoadLibraryA
VirtualAlloc

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

attach
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE