db837623abbef40384bca76eca1c1f02_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db837623abbef40384bca76eca1c1f02_JaffaCakes118
Size

260KB
MD5

db837623abbef40384bca76eca1c1f02
SHA1

399726ce01e036ab4377b6b4d844f17a5e6ee585
SHA256

e596cab7534cd6858761290b5510ae791f0e8be2d676ab62b391955dcd25ac20
SHA512

5f214aae1df1fb26f876c0d88fc67966ba51e7cdd5fff1b1cc492fee02ddd7cb59ae0e901afd3dd5b4bbaaf34fb2dc5e73af3fd2e4311adf2ecb92af78992ad9
SSDEEP

6144:sB53Mex5UQNwqF6Osz0DfOzomnAKedW8SsimMDC:sB53MexNKnOsz0LOzpAt/lM2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db837623abbef40384bca76eca1c1f02_JaffaCakes118

Files

db837623abbef40384bca76eca1c1f02_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

0
Size: - Virtual size: 476KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1
Size: 225KB - Virtual size: 320KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE