dc4ca76332e92c6fa54f493304379686_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc4ca76332e92c6fa54f493304379686_JaffaCakes118
Size

74KB
MD5

dc4ca76332e92c6fa54f493304379686
SHA1

5a1b719e28d33e151ac32af5929cb87b42b270a0
SHA256

509423d1a22e655302c91b984e1033ca88910315fc4d68e0789e6aac50a0d815
SHA512

1b0936e8865ab61f301ba804217f05e3b872ce5261ecd619ad99d9cc0e189bac6c51656f8341e0c78794869cf959eaf786c4e831da1750d8b9f4ea6c32755768
SSDEEP

1536:dxqDax5cT1mWj5m23Lzhsy6M6M/+wP7afj2tXHb16JRmiHwtAfO1:rqy1WMguw9/+wjCmMmltAE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc4ca76332e92c6fa54f493304379686_JaffaCakes118

Files

dc4ca76332e92c6fa54f493304379686_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f1eddde9199fc95ef6091398955ec6a8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualAlloc

aclui

CreateSecurityPage

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ