dd12ecbdf0942fda89c8d2603bf67eca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd12ecbdf0942fda89c8d2603bf67eca_JaffaCakes118
Size

72KB
MD5

dd12ecbdf0942fda89c8d2603bf67eca
SHA1

1d8748056100d11daa2d7aca9f9b494d1b40b6a5
SHA256

b0d6c779b9a6e2362608a3900a247717a9f74200f66ef78fc84139d76fca83b8
SHA512

8d54982c53595f1a0b4406deaf1e433d69f6ca1e87971224c79e61766d34498ab1c98c44094888af066eabc4ef18b26ed5c2bb6bc1df649f4cface8e50bb16d8
SSDEEP

1536:UeBIBuLT8Tp/AsVEt6cYHeUCLK5GWqNeaanlLjKAmobXL2:fBIIT8A6cHG5GO3lPK5Q2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd12ecbdf0942fda89c8d2603bf67eca_JaffaCakes118

Files

dd12ecbdf0942fda89c8d2603bf67eca_JaffaCakes118
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 67KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE