d4a455a3a4354b718103e08cbcdb47c5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4a455a3a4354b718103e08cbcdb47c5_JaffaCakes118
Size

94KB
MD5

d4a455a3a4354b718103e08cbcdb47c5
SHA1

d0fe9cb7a22c5b29040a1c9383537e0c35c298df
SHA256

d45136e3d3377c450047733ac050c23d7922c72b2380e4b00af96129d4924267
SHA512

dabcb7013416e785243dbcb27754bcd85e9151af98e0172af43f89393a25f22699c7d8e7f50668ba8d116391092458ed496f9822c4a2c3b31b55c177b7fc6fe2
SSDEEP

1536:0cEoioG8fjgHIO0zDIURrgXiS6fbLxEgUvx5wTb0oDPK0CsNdyukfP4:VEoZG8fjrOIDbR8mywcE2sNYFfP4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4a455a3a4354b718103e08cbcdb47c5_JaffaCakes118

Files

d4a455a3a4354b718103e08cbcdb47c5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4c0d3202854a061a3672d84200493121

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
LoadLibraryA
ExitProcess
GetProcAddress

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ