dd0fe23a963b575d87364995a12786dc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd0fe23a963b575d87364995a12786dc_JaffaCakes118
Size

77KB
MD5

dd0fe23a963b575d87364995a12786dc
SHA1

58f7155e22dae6eb3ca3c6b8e87f51ea0a416c76
SHA256

1828a757a6e8b5e227426601c258ab34cb589bfcf6460ed7b252ce07d9d4d7f2
SHA512

8de630653d7b3c4765539b987e981a88d79b68b2e7749ca8dbd3ba92300c72f185e97c31ba5aea41fd045dc7f2380bea7f16846629a7e8672c9b98153bacb7e7
SSDEEP

1536:haP+nAXdNdRwmUr/IqAzGgsg/VRRWLIWrWYBs20mRuYWTC0:cHXdXgLIygsg/VHk/luYWG0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd0fe23a963b575d87364995a12786dc_JaffaCakes118

Files

dd0fe23a963b575d87364995a12786dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dc63962a2b3c450b737a0071fa1a50a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreatePipe
OpenProcess
VirtualProtect

shell32

StrRChrIW
StrRChrIW
SHGetMalloc

Sections

.text
Size: 41KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ