db73aaa63d375ae1f4bc9bd3cc9b4d66_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db73aaa63d375ae1f4bc9bd3cc9b4d66_JaffaCakes118
Size

25KB
MD5

db73aaa63d375ae1f4bc9bd3cc9b4d66
SHA1

7322fca537490d2c516f16a8530a4b9e2a308f7e
SHA256

e7acd0b66de3b2cb666e49495db6f45d426d548815f8017cafbc1214b262bea2
SHA512

d839215d770416ad6be5925cfae5162eace963cf8b483d0fa523a3311b8e04b206ebbf767fe159ac4e40eb05b0612990c497d0286768fa49c8a447ecf7113908
SSDEEP

384:abXJeIoaxanklpuDgdrjr58rvUCVns4COuRa+RdrpWl/WftJOt:abX5RanklpuarZ8rvJLwYM4Wtk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db73aaa63d375ae1f4bc9bd3cc9b4d66_JaffaCakes118

Files

db73aaa63d375ae1f4bc9bd3cc9b4d66_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f8119480c250d3b8181f2306a82e97d1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
lstrcatW
GetProcAddress
LoadLibraryA
CreateFileW
GetWindowsDirectoryA
CreateFileA
lstrcatA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ