df0bdfebf1a6a0fb57f88f4db044f4d4_JaffaCakes118 | Triage

Sharing

General

Target

df0bdfebf1a6a0fb57f88f4db044f4d4_JaffaCakes118
Size

99KB
MD5

df0bdfebf1a6a0fb57f88f4db044f4d4
SHA1

5dcb64ca98fb3143b0e420b69882d0a601598206
SHA256

cbcef92f83d9bfec18edcd979166547f0a656c9860f605cb25908e184c434a1d
SHA512

592a9186eb90801dd141d065f2e67d1406f1b14feb01f91fe09ce38c5450bd8568438b5e2643987d7f79e784a11331bea1bd7d5ad470b4392ad54c0578edc45c
SSDEEP

1536:+WlJg2SazENVUOOpLuturyICturNn8S9iFGK8ZV5Jja9MkuhiMHoI2l1SYFXQHlF:FlJ0UOUEVoigzuOiMII2GYFgF/BSc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df0bdfebf1a6a0fb57f88f4db044f4d4_JaffaCakes118

Files

df0bdfebf1a6a0fb57f88f4db044f4d4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 13KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mpcrypt
Size: 512B - Virtual size: 4KB

.kiucryp
Size: 512B - Virtual size: 4KB