d9bea1c418d95398aac6337dff5f59e4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9bea1c418d95398aac6337dff5f59e4_JaffaCakes118
Size

95KB
MD5

d9bea1c418d95398aac6337dff5f59e4
SHA1

b359949a848ad209755028bb69181846465e8a3a
SHA256

b0ee20c36eb8789f530180a42314a4c77027678b12924e4231404ee18e46d043
SHA512

1dba89acf20dde49504425fe2b9449c5f284fe64334f8f2d60c1ce7239fc0185b2afc4045b45b539cd73f3b4d1fd1db05dd1c9994ca31d2bed47593fbf4f3641
SSDEEP

1536:6cwABao0jGHvnZZOiAdREeX0pfZ84UPKZUuJ+eB6u9a3BVqxOAbaoA5SB51/h/a8:lfaBavZZOiAdRECAz6Sh0WVNoSl/X6y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9bea1c418d95398aac6337dff5f59e4_JaffaCakes118

Files

d9bea1c418d95398aac6337dff5f59e4_JaffaCakes118
.exe windows:1 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.naked1
Size: - Virtual size: 168KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.naked2
Size: 94KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ