d5c1bee6d286da047ca79c663cd78819_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5c1bee6d286da047ca79c663cd78819_JaffaCakes118
Size

1.8MB
MD5

d5c1bee6d286da047ca79c663cd78819
SHA1

b2a8dcea5525fae9eb6d2da881ee77f805e40a43
SHA256

4c1a2aff74cde435d361e7f764183e9d3e67dcabe580238d4c55bed1be10d722
SHA512

f33f2ae5e6ea8456dd80023e18aec53451314b8cdf2b273b337d2be94293927f71554438e3be5e1b6ba74e40a038cc91b9bc9cf8bf04b016f794b023bc25b61b
SSDEEP

49152:Lcgl5gXPThxO64q4x54oO/nJYBM4gD5jVl:LcgIXPThA+iqd/aS4gD5jH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5c1bee6d286da047ca79c663cd78819_JaffaCakes118

Files

d5c1bee6d286da047ca79c663cd78819_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8a4fb061a641d612668d06c174b6b495

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32 rasapi32

lstrcmpA Qc'

Sections

.text
Size: 396KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ