dd11162d6d8864f863b9801e464391aa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd11162d6d8864f863b9801e464391aa_JaffaCakes118
Size

62KB
MD5

dd11162d6d8864f863b9801e464391aa
SHA1

dbee3b5e6f38a0d448413c3d747cfced7fed9184
SHA256

cf05ce6bc67caeafefc6756e3b6dd127b8407eb3cf2d02492e03549c3218371f
SHA512

dcde738eb2de52e0216a38aa5ec588ab0b64190cd349fb1c42f2134b69bb4ebf175989eccbfc197d51eaa63ff62a1d469b4095658a1c242e204a846e768a378e
SSDEEP

768:2fMKmJqvEaDeuFCj+hliLKMWFXR3jwrf+SCUpRRR0Iml0hKgYlyep/9FT0tm7TMW:6jluSA7f+GRO2g9MmnMsl9nMgafGjWp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd11162d6d8864f863b9801e464391aa_JaffaCakes118

Files

dd11162d6d8864f863b9801e464391aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b8e84ab89c20f594ee1115d422f850fc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumLanguageGroupLocalesA
BaseInitAppcompatCache
DebugActiveProcessStop
GetFileSize
FlushViewOfFile
MoveFileExA
HeapUnlock
CreateFileA
GetDiskFreeSpaceW
WaitForSingleObject
CancelWaitableTimer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE