dda74a42926270a958dc403511f8e326_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dda74a42926270a958dc403511f8e326_JaffaCakes118
Size

167KB
MD5

dda74a42926270a958dc403511f8e326
SHA1

7b96abeb372e69c0a13616b0bd238c38267ad142
SHA256

01990897782f6e52ec0335bf3d00b1aa24e1a3810f343bb77f37da3b0a88d6a4
SHA512

7035293c95766d8e61098db4c2f9a8fc4e8ad8efe0ae2ccd5da3c08e1777f881b67738fd75a271f7de95d0912d2f5b527f6c73f88a70b03c03c2c1bc436a757c
SSDEEP

3072:BX0T3+SaoBSPVko4xyD8U3z3Xk8tbpGFFd7tJtafBFK5oW5tNmmW5g8P:Bk3SPmojRXksbwFFltJe2ostNmT5gk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dda74a42926270a958dc403511f8e326_JaffaCakes118

Files

dda74a42926270a958dc403511f8e326_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 13KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

picrypt
Size: 512B - Virtual size: 4KB

nucrypt
Size: 512B - Virtual size: 4KB