db645f84f79ae86a20a6191475e70ae9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db645f84f79ae86a20a6191475e70ae9_JaffaCakes118
Size

7.6MB
MD5

db645f84f79ae86a20a6191475e70ae9
SHA1

d8260dafa8bf4371a2ceb2dbf9882a5ec6a58ad7
SHA256

70a60a977d5e2e65667e5c296c09d4816ab198eb058f24a5aa05cdbad9edbe64
SHA512

b41d00f6919264e321ece16cd2cf6f5455e430336625d118d5837bae2fd7f54bb9d322cbab20f39d0580014a804a1b8dec36e6663e1661f0d633d1690731636f
SSDEEP

768:LyNovA586VA/H/pAcbVugAFBbadjHO+yav9Hps61JP:L7t5ZbVug2Fada+y0BpbDP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db645f84f79ae86a20a6191475e70ae9_JaffaCakes118

Files

db645f84f79ae86a20a6191475e70ae9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.data
Size: 12KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE